JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.146.39.13

156.146.39.13 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 18%: ?

18%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-156-146-39-13.cdn77.com
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.146.39.13

Whois 156.146.39.13

IP Abuse Reports for 156.146.39.13:

This IP address has been reported a total of 31 times from 11 distinct sources. 156.146.39.13 was first reported on October 20th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-23 22:13:16 (1 week ago)	(mod_security) mod_security (id:210580) triggered by 156.146.39.13 (unn-156-146-39-13.cdn77.com): 1 ... show more (mod_security) mod_security (id:210580) triggered by 156.146.39.13 (unn-156-146-39-13.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 18:13:10.956797 2026] [security2:error] [pid 28448:tid 28448] [client 156.146.39.13:36108] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:log_filename. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|hydrogenplus.net\|F\|2"] [data "Matched Data: etc/passwd found within ARGS:log_filename: ../../../../../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "hydrogenplus.net"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ajsE9lTP-Zia9_5wWvzp0QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-06-16 11:19:45 (2 weeks ago)	[11:19] Port scanning. Port(s) scanned: TCP/8000	Port Scan
🇺🇸 drewf.ink	2026-06-16 01:23:59 (2 weeks ago)	[01:23] Port scanning. Port(s) scanned: TCP/8000	Port Scan
🇺🇸 donarev419	2026-06-16 00:47:31 (2 weeks ago)	Connection to port 8000 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 drewf.ink	2026-06-16 00:43:50 (2 weeks ago)	[00:43] Port scanning. Port(s) scanned: TCP/8000	Port Scan
🇺🇸 IDS	2025-12-07 12:16:49 (6 months ago)	Dec 7 07:16:28 mail postfix/smtpd[2593173]: warning: unknown[156.146.39.13]: SASL PLAIN authenticat ... show more Dec 7 07:16:28 mail postfix/smtpd[2593173]: warning: unknown[156.146.39.13]: SASL PLAIN authentication failed: authentication failure Dec 7 07:16:32 mail postfix/smtpd[2593173]: warning: unknown[156.146.39.13]: SASL LOGIN authentication failed: authentication failure Dec 7 07:16:35 mail postfix/smtpd[2593311]: warning: unknown[156.146.39.13]: SASL PLAIN authentication failed: authentication failure Dec 7 07:16:38 mail postfix/smtpd[2593311]: warning: unknown[156.146.39.13]: SASL LOGIN authentication failed: authentication failure Dec 7 07:16:48 mail postfix/smtpd[2593173]: warning: unknown[156.146.39.13]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force Web App Attack
🇺🇸 xmission.com	2025-08-20 22:57:20 (10 months ago)	Blocked by UFW (TCP on 61348) Source port: 57997 TTL: 54 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 61348) Source port: 57997 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 156.146.39.13) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 ᴀʀᴛ	2025-07-10 19:22:33 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from US. ASN: 212238 (CDNEXT) Protocol: HTTP/2 (GET method) UA: Mo ... show more Triggered Cloudflare WAF (l7ddos) from US. ASN: 212238 (CDNEXT) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇫🇷 ᴀʀᴛ	2025-07-10 14:13:26 (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. ASN: 212238 (CDNEXT) Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. ASN: 212238 (CDNEXT) Protocol: HTTP/1.1 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2025-05-12 08:52:35 (1 year ago)	Web password guessing	Brute-Force
🇩🇪 marzzzello	2025-04-29 03:55:27 (1 year ago)	Ports: 15x 21896	Port Scan
🇨🇭 ScanThe.Net	2025-04-23 17:22:20 (1 year ago)	ID: 1960347166 \| PORT: 3389 \| https://156-146-39-13.scanthe.net	Port Scan
🇨🇭 ScanThe.Net	2025-04-23 16:37:01 (1 year ago)	ID: 1959958751 \| PORT: 3389 \| https://156-146-39-13.scanthe.net	Port Scan
🇨🇭 ScanThe.Net	2025-04-23 16:18:15 (1 year ago)	ID: 1959797749 \| PORT: 3389 \| https://156-146-39-13.scanthe.net	Port Scan
🇨🇭 ScanThe.Net	2025-04-23 15:49:13 (1 year ago)	ID: 1959537398 \| PORT: 3389 \| https://156-146-39-13.scanthe.net	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇴 154.118.222.118

🇹🇭 147.50.103.212

🇲🇾 47.250.59.1

🇮🇳 203.76.188.139

🇧🇷 200.219.200.16

🇧🇷 177.200.65.214

🇫🇷 173.249.52.138

🇩🇪 148.153.140.171

🇩🇪 69.5.169.200

🇳🇱 45.156.87.253

🇷🇴 2.57.122.168

🇨🇳 223.105.71.106

🇮🇪 185.192.16.205

🇺🇸 162.243.138.30

🇧🇩 103.111.225.120

🇮🇳 52.172.177.191

🇺🇸 40.117.97.0

🇻🇳 27.79.1.64

🇺🇸 172.172.180.124

🇺🇸 154.83.197.151