JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

146.148.72.207

Recent Activity

Abuse Confidence Score

88% Critical

20 reports

16 reporters · latest 3 days ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 207.72.148.146.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: Council Bluffs, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

20 from 16 distinct reporters

First reported

November 6th 2026

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 5 🇨🇿 Czechia 4 🇳🇱 Netherlands 3

Most common categories Web App Attack 14 Hacking 7 Brute-Force 5 Bad Web Bot 5 DDoS Attack 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-11-06 20:04:34 UTC · (3 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-config.php.swp UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot) This report was generated by: https://github.com/sefine ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-config.php.swp UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 Alboweb B.V.	2026-11-06 19:11:04 UTC · (3 days ago)	Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail	Bad Web Bot
🇨🇦 1gz	2026-11-06 19:04:43 UTC · (3 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-config.php.old UA: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/) This report was generated by: https://github.co ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /wp-config.php.old UA: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-11-06 19:03:04 UTC · (3 days ago)	IP matched detection query more than 2 hosts and only bad rq long ban.	Brute-Force Web App Attack Hacking
🇩🇪 creoline GmbH	2026-11-06 18:50:34 UTC · (3 days ago)	[WAF] Multiple suspicious HTTP requests has been blocked	Bad Web Bot Web App Attack
🇨🇭 Origon	2026-11-06 18:27:37 UTC · (4 days ago)	http-probing - IP: 146.148.72.207 - time="2026-11-06T19:27:37+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 146.148.72.207 (US/396982) : 4h ban on Ip 146.148.72.207" module=db	Web App Attack
🇳🇱 Alboweb B.V.	2026-11-06 18:11:05 UTC · (4 days ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
🇩🇪 ghostwarriors	2026-11-06 17:50:24 UTC · (4 days ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-11-06 17:42:15 UTC · (4 days ago)	146.148.72.207 - - [06/Nov/2026:18:42:13 +0100] "GET /proc/self/environ HTTP/2.0" 404 313 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/ ... show more 146.148.72.207 - - [06/Nov/2026:18:42:13 +0100] "GET /proc/self/environ HTTP/2.0" 404 313 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 146.148.72.207 - - [06/Nov/2026:18:42:13 +0100] "GET /proc/self/cmdline HTTP/2.0" 404 290 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 146.148.72.207 - - [06/Nov/2026:18:42:13 +0100] "GET /.next/.env HTTP/2.0" 403 294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 146.148.72.207 - - [06/Nov/2026:18:42:13 +0100] "GET /proc/self/cgroup HTTP/2.0" 404 290 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 146.148.72.207 - - [06/Nov/2026:18:42:13 +0100] "GET /gc-service.json HTTP/2.0" 404 290 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 146.148.72.2 show less	Web App Attack Hacking
Anonymous	2026-11-06 17:27:30 UTC · (4 days ago)	146.148.72.207 - - [06/Nov/2026:18:27:28 +0100] "GET /sitemap.xml HTTP/1.1" 404 497 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1 ... show more 146.148.72.207 - - [06/Nov/2026:18:27:28 +0100] "GET /sitemap.xml HTTP/1.1" 404 497 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 146.148.72.207 - - [06/Nov/2026:18:27:28 +0100] "GET /sitemap_index.xml HTTP/1.1" 404 497 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 146.148.72.207 - - [06/Nov/2026:18:27:28 +0100] "GET /hmkchskxdufj8ccua8d4 HTTP/1.1" 404 497 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 146.148.72.207 - - [06/Nov/2026:18:27:28 +0100] "GET /checkout HTTP/1.1" 404 497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 146.148.72.207 - - [06/Nov/2026:18:27:28 +0100] "GET /graphql HTTP/1.1" 404 497 "-" "Mozilla/5.0 (Windows NT 10.0 ... show less	DDoS Attack
🇩🇪 updown.io	2026-11-06 16:08:20 UTC · (4 days ago)	{"level":"info","ts":1793981300.0569222,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"146.148.72.207","remote_port":"48868","client_ip":"146.148.72.207","proto":"HTTP/2.0","method":"GET","host":"status.suncomet.fi"," ... show more {"level":"info","ts":1793981300.0569222,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"146.148.72.207","remote_port":"48868","client_ip":"146.148.72.207","proto":"HTTP/2.0","method":"GET","host":"status.suncomet.fi","uri":"/service-account.json","headers":{"X-Remote-Addr":["100.125.38.93"],"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip"],"Accept":["/"],"X-Forwarded-For":["100.125.38.93"],"X-Real-Ip":["100.125.38.93"],"X-Custom-Ip-Authorization":["100.125.38.93"],"X-Remote-Ip":["100.125.38.93"],"Cluster-Client-Ip":["100.125.38.93"],"X-Proxyuser-Ip":["100.125.38.93"],"User-Agent":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"X-Originating-Ip":["100.125.38.93"],"True-Client-Ip":["100.125.38.93"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Forwarded":["for=100.125.38.93"],"X-Clie ... show less	DDoS Attack Web App Attack
🇩🇪 sdos.es	2026-11-06 16:06:52 UTC · (4 days ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"	Web App Attack
🇺🇸 mnsf	2026-11-06 16:05:31 UTC · (4 days ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇬🇧 Aetherweb Ark	2026-11-06 16:05:30 UTC · (4 days ago)	(mod_security) mod_security (id:949110) triggered by 146.148.72.207 (US/United States/207.72.148.146.bc.googleusercontent.com): N in the last X secs	Web App Attack
🇦🇹 SchiWaGoA	2026-11-06 15:56:09 UTC · (4 days ago)	fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)	Web App Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇷 193.35.155.147

🇰🇷 218.157.120.60

🇦🇷 216.244.207.186

🇫🇷 193.46.243.100

🇺🇸 134.122.113.70

🇨🇳 125.88.225.11

🇸🇪 83.233.255.240

🇺🇸 40.74.211.165

🇳🇱 213.209.159.231

🇰🇷 175.209.156.146

🇦🇷 148.222.222.226

🇬🇷 86.104.71.200

🇨🇦 85.217.149.18

🇮🇳 66.116.224.33

🇸🇬 47.82.50.10

🇳🇱 45.148.10.157

🇬🇧 35.203.210.11

🇺🇸 34.96.52.17

🇧🇷 205.210.31.180

🇺🇸 136.117.90.63