146.148.8.94

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
41 reports
35 reporters ยท latest 2 weeks ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
94.8.148.146.bc.googleusercontent.com
Domain Name
google.com
Country
๐Ÿ‡ง๐Ÿ‡ช Belgium
City
Brussels, Brussels Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
41 from 35 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ซ๐Ÿ‡ท France 10 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 8 ๐Ÿ‡ต๐Ÿ‡ฑ Poland 3
Most common categories Port Scan 26 Hacking 12 Brute-Force 11 SSH 4 Web App Attack 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ง๐Ÿ‡ท radardatelecom
Blocked by Radar da Telecom firewall โ€” abuseipdb
Bad Web Bot Web App Attack
๐Ÿ‡ธ๐Ÿ‡ฌ heyzg
SSH Command Execution + Auth Attempts (Moderate) (observed): 5 auths, 7 cmds, 12s
Hacking SSH
๐Ÿ‡ซ๐Ÿ‡ท abunssr
Seen 2026-10-29T18:43:10+03:00 to 2026-10-29T18:43:18+03:00. Honeypot on closed TCP ports 5432: 1 session(s), taken for postgres.
Port Scan
๐Ÿ‡ญ๐Ÿ‡ฐ azminawwar
[146.148.8.94] triggered by honeypot on port [3306], Timestamp [2026-10-29T14:41:03Z](no payload)
Port Scan Hacking
๐Ÿ‡ต๐Ÿ‡ฑ ZyperSnare
Automated T-Pot honeypot detection via ubuntu.
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: repeated TCP service probing on TCP/3306 (MySQL); 2 application-level events across 2 source port(s). Sensor(s): Dionaea.
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท โœจ
Rule : MariaDB Rule: MariaDB Event: MariaDB UserAccount: root Access denied for user 'root'@'146.148.8.94' (using password: NO)
Port Scan Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท renzo64
Rule : MariaDB Rule: MariaDB Event: MariaDB UserAccount: root Access denied for user 'root'@'146.148.8.94' (using password: NO)
Port Scan Brute-Force
๐Ÿ‡ณ๐Ÿ‡ฑ ShxneEXE
SSH honeypot honeypot-01: login attempt as 'admin' from 146.148.8.94 port 32028 to dst port 5432 at 2026-10-29 11:39:53 UTC. No legitimate users on this host - any login is brute-force/scanning.
Brute-Force SSH
๐Ÿ‡ฎ๐Ÿ‡ฉ FallingGong2833
tcp/3306
Port Scan
๐Ÿ‡ญ๐Ÿ‡ฐ sandra361
Port scan detected: 38 attempts across 1 port (5432). | Evidence: REAPER_TARPIT: IN=eth0 SRC=146.148.8.94 LEN=72 TOS=0x14 PREC=0x00 TTL=57 ID=21950 DF PROTO=TCP SPT=46750 DPT=5432 WINDOW=42600 RES=0x00 ACK PSH URGP=0
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ Bankbook8585
T-Pot honeypot | Dionaea honeypot: mysqld
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท Zikmadol
Trapline honeypot: Redis exploitation. Feed: https://github.com/Zikmadol/trapline-ioc
Hacking
๐Ÿ‡บ๐Ÿ‡ธ cunning-fox
Probing of exposed network services observed.
Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ venix
Unauthorized connection attempt detected from IP address 146.148.8.94 to port 5432 (web01.amsterdam)
Brute-Force Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฉ๐Ÿ‡ด 186.7.43.57
๐Ÿ‡ฎ๐Ÿ‡ถ 185.206.124.55
๐Ÿ‡ป๐Ÿ‡ณ 161.248.146.26
๐Ÿ‡ฎ๐Ÿ‡ณ 122.172.81.207
๐Ÿ‡ต๐Ÿ‡ฑ 91.223.250.92
๐Ÿ‡ง๐Ÿ‡ฌ 79.124.40.162
๐Ÿ‡ท๐Ÿ‡บ 78.29.48.163
๐Ÿ‡บ๐Ÿ‡ธ 54.240.7.13
๐Ÿ‡บ๐Ÿ‡ธ 54.201.10.208
๐Ÿ‡บ๐Ÿ‡ธ 45.156.129.160
๐Ÿ‡ณ๐Ÿ‡ฑ 45.115.26.128
๐Ÿ‡ง๐Ÿ‡ช 35.210.236.178
๐Ÿ‡ง๐Ÿ‡ช 35.206.173.188
๐Ÿ‡บ๐Ÿ‡ธ 12.0.0.3
๐Ÿ‡ง๐Ÿ‡ช 198.235.24.153
๐Ÿ‡บ๐Ÿ‡ธ 195.184.76.169
๐Ÿ‡ง๐Ÿ‡ท 190.115.84.25
๐Ÿ‡ง๐Ÿ‡ท 168.196.216.219
๐Ÿ‡ต๐Ÿ‡ญ 136.158.124.141
๐Ÿ‡ฉ๐Ÿ‡ฟ 105.235.137.25
feedback