JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.148.30.141

146.148.30.141 was found in our database!

This IP was reported 145 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	141.30.148.146.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.148.30.141

Whois 146.148.30.141

IP Abuse Reports for 146.148.30.141:

This IP address has been reported a total of 145 times from 131 distinct sources. 146.148.30.141 was first reported on October 22nd 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 pexodelic	2026-10-23 05:05:03 (13 hours ago)	Automated report from web, SSH and FTP server logs: 66 requests probing for exposed secrets (.env, . ... show more Automated report from web, SSH and FTP server logs: 66 requests probing for exposed secrets (.env, .git, config files). First reported 2026-10-23 02:05 UTC, last reported 2026-10-23 07:05 UTC; counts cover the current log rotation window. show less	Hacking Web App Attack
🇧🇪 taivas.nl	2026-10-23 04:38:01 (13 hours ago)	Many_bad_calls	Web App Attack
Anonymous	2026-10-23 04:32:56 (14 hours ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇵🇱 Budyn	2026-10-23 03:06:39 (15 hours ago)	Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_2 \| Action: AWS API Call \| Token: tu8j ... show more Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_2 \| Action: AWS API Call \| Token: tu8jkpvo92f821qykacxbbvok \| Client Tool: aws-sdk-dotnet-coreclr/3.7.500.0 ua/2.0 os/linux#7.0.0.1014 md/ARCH#X64 lang/.NET_Core#8.0.25 md/aws-sdk-dotnet-core#3.7.500.0 api/EC2#3.7.500.0 cfg/retry-mo... show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Alfafoxtrot	2026-10-23 02:47:01 (15 hours ago)	Reason: mass scanner \| src-ip: 146.148.30.141 \| dport=80 \| Protoc.=TCP \| Inc. 2d: 8	Port Scan
🇩🇪 s@ch@	2026-10-23 02:45:01 (15 hours ago)	Jail: plesk-modsecurity \| Web application attack (Plesk ModSecurity)	Web App Attack
🇩🇪 XICTRON	2026-10-23 02:40:06 (15 hours ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇺🇸 JustMeHere	2026-10-23 02:37:35 (15 hours ago)	[Thu Oct 22 22:37:31.157781 2026] [security2:error] [pid 5044:tid 5072] [client 146.148.30.141:47532 ... show more [Thu Oct 22 22:37:31.157781 2026] [security2:error] [pid 5044:tid 5072] [client 146.148.30.141:47532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vpn.yorknation.com"] [uri "/phpinfo.php"] [unique_id "atrIa9x8JOJXQeNd1VZf7AAAAQA"] ... show less	Web App Attack
🇺🇸 NeverBehave	2026-10-23 02:34:57 (16 hours ago)	[fail2ban] service ocserv jail	Brute-Force Web App Attack
🇭🇺 whitehoodie	2026-10-23 02:34:32 (16 hours ago)	AUTOMATED REPORT: Tried to access .env file	Hacking Bad Web Bot Web App Attack
🇩🇪 klaus_ph	2026-10-23 02:33:01 (16 hours ago)	[Fri Oct 23 04:33:00.785330 2026] [core:info] [pid 3906473] [client 146.148.30.141:34638] AH00128: F ... show more [Fri Oct 23 04:33:00.785330 2026] [core:info] [pid 3906473] [client 146.148.30.141:34638] AH00128: File does not exist: /home/bga.vufind.net/public_html/phpinfo.php ... show less	Brute-Force
🇺🇸 chrisj	2026-10-23 02:31:22 (16 hours ago)	[Fri Oct 23 02:31:21.818671 2026] [proxy_fcgi:error] [pid 527499:tid 527524] [remote 146.148.30.141: ... show more [Fri Oct 23 02:31:21.818671 2026] [proxy_fcgi:error] [pid 527499:tid 527524] [remote 146.148.30.141:59512] AH01071: Got error 'Primary script unknown' [Fri Oct 23 02:31:21.922321 2026] [proxy_fcgi:error] [pid 527499:tid 527534] [remote 146.148.30.141:59512] AH01071: Got error 'Primary script unknown' [Fri Oct 23 02:31:22.193683 2026] [proxy_fcgi:error] [pid 527499:tid 527527] [remote 146.148.30.141:59512] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇫🇷 sthoyer.de	2026-10-23 02:24:04 (16 hours ago)	146.148.30.141 - - [23/Oct/2026:04:24:02 +0200] "GET /.git/config HTTP/2" 302 495 "-" "Mozilla/5.0 ( ... show more 146.148.30.141 - - [23/Oct/2026:04:24:02 +0200] "GET /.git/config HTTP/2" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 146.148.30.141 - - [23/Oct/2026:04:24:02 +0200] "GET /.env HTTP/2" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 146.148.30.141 - - [23/Oct/2026:04:24:02 +0200] "GET /.env.example HTTP/2" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇬🇧 stevendodd	2026-10-23 02:24:01 (16 hours ago)	146.148.30.141 - - [23/Oct/2026:03:24:00 +0100] "GET /.git/config HTTP/1.1" 404 597 "-" "Mozilla/5.0 ... show more 146.148.30.141 - - [23/Oct/2026:03:24:00 +0100] "GET /.git/config HTTP/1.1" 404 597 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 146.148.30.141 - - [23/Oct/2026:03:24:00 +0100] "GET /.env HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 146.148.30.141 - - [23/Oct/2026:03:24:00 +0100] "GET /.aws/credentials HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 146.148.30.141 - - [23/Oct/2026:03:24:00 +0100] "GET /.git/logs/HEAD HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 146.148.30.141 - - [23/Oct/2026:03:24:00 +0100] "GET /backend/.env HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 146.148.30.141 - - [23/Oct/2026:03:24:00 +0100] "GET /.env.example HTTP/1.1" 404 582 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 146.148.30.141 - - [23/Oct/2026:03:24:00 +0100] "GET /api/.env HTTP/1.1" 404 262 "-" "Mozil ... show less	Brute-Force Web App Attack
🇺🇸 creechy	2026-10-23 02:20:40 (16 hours ago)	146.148.30.141 - - [22/Oct/2026:19:20:37 -0700] "GET /.git/config HTTP/1.1" 403 689 "-" "Mozilla/5.0 ... show more 146.148.30.141 - - [22/Oct/2026:19:20:37 -0700] "GET /.git/config HTTP/1.1" 403 689 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Hacking Bad Web Bot

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 88.148.85.226

🇷🇴 2.57.122.238

🇸🇬 178.128.208.167

🇳🇱 176.65.132.239

🇰🇷 124.195.255.12

🇨🇳 123.160.205.253

🇮🇳 117.223.1.49

🇩🇪 94.16.106.15

🇱🇹 62.60.134.150

🇺🇸 52.167.144.24

🇳🇱 5.61.209.106

🇰🇷 211.46.177.174

🇲🇽 187.190.224.71

🇧🇷 179.83.134.101

🇨🇳 120.237.113.139

🇺🇿 109.94.173.8

🇺🇸 45.134.142.197

🇭🇰 45.116.78.92

🇳🇱 34.12.205.193

🇯🇵 8.216.9.166