146.148.23.172

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
30 reports
26 reporters · latest 15 hours ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
172.23.148.146.bc.googleusercontent.com
Domain Name
google.com
Country
🇧🇪 Belgium
City
Brussels, Brussels Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
30 from 26 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇳🇱 Netherlands 5 🇨🇿 Czechia 4 🇩🇪 Germany 4
Most common categories Web App Attack 19 Bad Web Bot 7 Hacking 7 Brute-Force 6 SQL Injection 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.
Web App Attack SSH Hacking
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-05 UTC.
Brute-Force
🇫🇮 Christopher Hughes
Web App Attack
🇩🇪 LRob
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler) | path: /robots.txt
Bad Web Bot
🇩🇪 DEV-DNS
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇨🇦 Mediashaker
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 146.148.23.172 (BE/Belgium/172.23.148.146.bc.googleusercontent.com)
Bad Web Bot
🇭🇺 the-jani
HTTP GET sensitive-file probing (.env, Git metadata, path traversal): 77 requests. UTC 2026-11-05T09:03:05Z to 2026-11-05T09:03:09Z. Responses: 403 (77).
Web App Attack
🇺🇸 Agaman
Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-05 06:19 UTC. Samples: GET /apps/web/.env 444. UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot). Detected by fail2ban.
Web App Attack
🇧🇪 cmbplf
2.259 requests with url.path *.env 206 requests with url.path */proc/*
Brute-Force Bad Web Bot
🇩🇪 rh24
(badbots) Bad bot user-agent [redacted] from 146.148.23.172 (BE/Belgium/172.23.148.146.bc.googleusercontent.com)
Hacking
🇨🇦 SSH-Admin
Probing for Exploits on ns200
Exploited Host Web App Attack
🇨🇿 Countryman
IPS detection: Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass
Hacking
🇫🇮 paissangroup
Multiple WAF Violations
Web App Attack
🇳🇱 Alt255
Bad Web Bot Web App Attack
🇨🇦 SSH-Admin
Probing for Exploits on ns124
Exploited Host Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.111
🇨🇳 123.145.18.44
🇮🇹 217.26.179.199
🇦🇷 186.128.233.154
🇩🇪 167.94.146.43
🇺🇦 93.170.161.120
🇷🇴 92.118.39.77
🇨🇿 89.176.234.195
🇵🇹 85.241.23.182
🇺🇸 52.180.140.72
🇹🇼 35.201.230.64
🇺🇸 35.194.79.53
🇻🇳 14.161.252.92
🇳🇱 195.178.110.104
🇺🇸 191.101.241.242
🇺🇸 170.253.163.224
🇵🇭 160.30.141.10
🇨🇳 106.12.181.132
🇰🇪 41.139.165.73
🇺🇸 34.24.123.161
feedback