JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.148.119.38

146.148.119.38 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	38.119.148.146.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.148.119.38

Whois 146.148.119.38

IP Abuse Reports for 146.148.119.38:

This IP address has been reported a total of 104 times from 73 distinct sources. 146.148.119.38 was first reported on July 18th 2026, and the most recent report was 36 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-20 18:04:08 (36 minutes ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Event ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=incognet.io; Paths=/.env,/.git/HEAD,/.git/config,/admin/.env,/api/.env; Country=BE; ASN=396982 GOOGLE-CLOUD-PLATFORM show less	Hacking Web App Attack
Anonymous	2026-07-20 17:10:07 (1 hour ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=incognet.io; Paths=/.next/build-manifest.json,/_next/build-manifest.json,/asset-manifest.json,/manifest.json,/nginx_status,/server-status; Country=BE; ASN=396982 GOOGLE-CLOUD-PLATFORM show less	DDoS Attack
Anonymous	2026-07-20 16:31:46 (2 hours ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
Anonymous	2026-07-20 16:03:48 (2 hours ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-crawl-non_statics; Action=ban; Eve ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-crawl-non_statics; Action=ban; Events=41; Hosts=portal.incognet.io; Paths=/.boto,/.htpasswd,/.ssh/id_dsa,/.ssh/id_rsa,/.svn/entries,/.vscode/launch.json; Country=BE; ASN=396982 GOOGLE-CLOUD-PLATFORM show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-07-20 13:45:06 (4 hours ago)	146.148.119.38 - - [20/Jul/2026:16:45:04 +0300] "GET /.env HTTP/1.1" 404 4584 "-" "Mozilla/5.0 (comp ... show more 146.148.119.38 - - [20/Jul/2026:16:45:04 +0300] "GET /.env HTTP/1.1" 404 4584 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)" ... show less	Web App Attack
🇬🇷 setupgr	2026-07-20 13:16:52 (5 hours ago)	(mod_security) mod_security (id:11000010) triggered by 146.148.119.38 (BE/Belgium/Brussels Capital/B ... show more (mod_security) mod_security (id:11000010) triggered by 146.148.119.38 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Jul 20 16:16:49.355847 2026] [security2:error] [pid 2195074:tid 2195138] [remote 146.148.119.38:54412] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "OAI-SearchBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "114"] [id "11000010"] [msg "BLOCKED BOT: OAI-SearchBot on ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/.env"] [unique_id "al4fwYCt1g_6c2-UrcJh0QABEgs"] show less	Port Scan
🇲🇾 Rizzy	2026-07-20 13:08:41 (5 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 debestelapp	2026-07-20 13:05:08 (5 hours ago)		Web App Attack
🇳🇿 Antinson	2026-07-20 13:02:05 (5 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇮🇩 sockominfo	2026-07-20 13:00:31 (5 hours ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇫🇷 Sklurk	2026-07-20 12:57:30 (5 hours ago)	Web App Attack	Web App Attack
🇪🇸 el-brujo	2026-07-20 12:42:59 (5 hours ago)	[Mon Jul 20 14:42:59.702970 2026] [proxy_fcgi:error] [pid 3596105:tid 3596170] [remote 146.148.119.3 ... show more [Mon Jul 20 14:42:59.702970 2026] [proxy_fcgi:error] [pid 3596105:tid 3596170] [remote 146.148.119.38:0] AH01071: Got error 'Primary script unknown\n' [Mon Jul 20 14:42:59.786405 2026] [proxy_fcgi:error] [pid 3596105:tid 3596159] [remote 146.148.119.38:0] AH01071: Got error 'Primary script unknown\n' ... show less	Hacking Web App Attack
🇨🇭 backslash	2026-07-20 12:42:05 (5 hours ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
🇩🇪 ger-stg-sifi1	2026-07-20 12:29:19 (6 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-20 12:01:22 (6 hours ago)	146.148.119.38 - - [20/Jul/2026:15:01:18 +0300] "GET /.env HTTP/1.1" 404 650 "-" "Mozilla/5.0 (compa ... show more 146.148.119.38 - - [20/Jul/2026:15:01:18 +0300] "GET /.env HTTP/1.1" 404 650 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 146.148.119.38 - - [20/Jul/2026:15:01:21 +0300] "GET /config/.env HTTP/1.1" 404 650 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" ... show less	Web App Attack

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 118.196.118.181

🇫🇷 51.75.253.68

🇺🇸 50.6.228.111

🇧🇷 20.226.60.151

🇺🇸 16.147.255.188

🇺🇸 205.210.31.83

🇺🇸 147.185.132.104

🇺🇸 136.33.245.120

🇹🇭 125.24.73.111

🇧🇩 104.22.29.145

🇺🇸 98.159.233.118

🇺🇸 91.230.168.27

🇷🇴 80.94.92.179

🇺🇸 20.64.105.0

🇧🇷 201.20.171.91

🇨🇦 170.205.18.187

🇬🇧 152.32.198.93

🇨🇳 120.48.11.36

🇺🇸 85.209.205.87

🇷🇴 79.119.88.118