JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.95.20.245

34.95.20.245 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 57%: ?

57%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	245.20.95.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.95.20.245

Whois 34.95.20.245

IP Abuse Reports for 34.95.20.245:

This IP address has been reported a total of 12 times from 10 distinct sources. 34.95.20.245 was first reported on June 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-08 17:27:53 (1 week ago)	http-probing - IP: 34.95.20.245 - time="2026-06-08T19:27:52+02:00" level=info msg="(555f66b4f6a7455 ... show more http-probing - IP: 34.95.20.245 - time="2026-06-08T19:27:52+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.95.20.245 (CA/396982) : 4h ban on Ip 34.95.20.245" module=db show less	Web App Attack
Anonymous	2026-06-08 13:44:58 (1 week ago)	(caddyscan) Scanner path probe from 34.95.20.245 (CA/Canada/245.20.95.34.bc.googleusercontent.com): ... show more (caddyscan) Scanner path probe from 34.95.20.245 (CA/Canada/245.20.95.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.95.20.245 - - [08/Jun/2026:13:44:52 +0000] "GET /.env.uat HTTP/1.1" [REDACTED] 200 2627 34.95.20.245 - - [08/Jun/2026:13:44:52 +0000] "GET /.env.qa HTTP/1.1" [REDACTED] 200 2627 34.95.20.245 - - [08/Jun/2026:13:44:52 +0000] "GET /.env.backup.txt HTTP/1.1" [REDACTED] 200 2627 34.95.20.245 - - [08/Jun/2026:13:44:52 +0000] "GET /.env.demo HTTP/1.1" [REDACTED] 200 2627 34.95.20.245 - - [08/Jun/2026:13:44:52 +0000] "GET /.env.sample HTTP/1.1" show less	Port Scan
Anonymous	2026-06-08 12:17:09 (1 week ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 11:38:07 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.95.20.245 (245.20.95.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.95.20.245 (245.20.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 07:38:02.092921 2026] [security2:error] [pid 31580:tid 31601] [client 34.95.20.245:56834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mateo-abogados.com"] [uri "/.env.backup.txt"] [unique_id "aiapmm04iJC_2_FFbNrVowAAAVI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 tarlabs	2026-06-08 11:04:24 (1 week ago)	IP banned by Fail2Ban (traefik jail)	Web App Attack
Anonymous	2026-06-08 07:01:14 (1 week ago)	(caddyscan) Scanner path probe from 34.95.20.245 (CA/Canada/245.20.95.34.bc.googleusercontent.com): ... show more (caddyscan) Scanner path probe from 34.95.20.245 (CA/Canada/245.20.95.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.95.20.245 - - [08/Jun/2026:07:01:11 +0000] "GET /.env.copy HTTP/1.1" [REDACTED] 200 2627 34.95.20.245 - - [08/Jun/2026:07:01:11 +0000] "GET /.env.example HTTP/1.1" [REDACTED] 200 2627 34.95.20.245 - - [08/Jun/2026:07:01:11 +0000] "GET /.env.template HTTP/1.1" [REDACTED] 200 2627 34.95.20.245 - - [08/Jun/2026:07:01:11 +0000] "GET /.env.dist HTTP/1.1" [REDACTED] 200 2627 34.95.20.245 - - [08/Jun/2026:07:01:11 +0000] "GET /.env.testing HTTP/1.1" show less	Port Scan
🇬🇧 consul.to	2026-06-08 05:04:27 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 updown.io	2026-06-08 03:42:43 (1 week ago)	{"level":"info","ts":1780890161.1656022,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1780890161.1656022,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.95.20.245","remote_port":"59918","client_ip":"34.95.20.245","proto":"HTTP/1.1","method":"GET","host":"kjihupdate.update.yxwvutsrutsrqpojihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/.env.preprod","headers":{"User-Agent":["Mozilla/5.0 (Linux; Android 9; Redmi Note 7 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000113697,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://kjihupdate.update.yxwvutsrutsrqpojihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/.env.preprod"],"Content-Type":[]}} {"level":"info","ts":1780890161.1670973,"logger":"http.log.access.log1","msg":"handled request","request":{"re ... show less	DDoS Attack Web App Attack
🇮🇹 VHosting	2026-06-08 03:35:03 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 03:32:47 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.95.20.245 (245.20.95.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.95.20.245 (245.20.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 23:32:43.736360 2026] [security2:error] [pid 7494:tid 7494] [client 34.95.20.245:33718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notariaarauco.tecnoconce.com"] [uri "/.env.local"] [unique_id "aiY324Vwrwcsr0p1zIMOngAAAG8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-06-08 02:52:59 (1 week ago)	Port Scan detected from 34.95.20.245 (CA/Canada/Quebec/Montreal/245.20.95.34.bc.googleusercontent. ... show more Port Scan detected from 34.95.20.245 (CA/Canada/Quebec/Montreal/245.20.95.34.bc.googleusercontent.com). show less	Port Scan
Anonymous	2026-06-08 00:27:04 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 34.95.20.245 (CA/Canada/245.20.95.34.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 34.95.20.245 (CA/Canada/245.20.95.34.bc.googleusercontent.com) show less	SQL Injection

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 195.86.192.66

🇺🇸 161.35.3.45

🇮🇳 103.88.76.27

🇨🇳 220.161.52.149

🇧🇷 209.14.88.118

🇺🇸 195.184.76.23

🇦🇷 186.57.3.137

🇳🇱 185.93.89.144

🇸🇮 176.65.134.34

🇸🇬 172.217.44.214

🇻🇳 171.231.177.8

🇨🇦 165.22.238.192

🇳🇱 158.94.210.201

🇺🇸 91.230.168.208

🇨🇦 85.217.149.65

🇺🇸 64.62.156.19

🇸🇬 43.156.111.141

🇬🇧 35.203.210.75

🇸🇦 5.163.255.55

🇲🇾 1.9.211.178