JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.146.39.136

156.146.39.136 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 0%: ?

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-156-146-39-136.cdn77.com
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.146.39.136

Whois 156.146.39.136

IP Abuse Reports for 156.146.39.136:

This IP address has been reported a total of 43 times from 35 distinct sources. 156.146.39.136 was first reported on September 13th 2023, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-26 23:05:38 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Cloud secrets probing show less	Bad Web Bot Web App Attack
🇨🇭 🇨🇭 Hosting	2026-03-26 07:10:53 (3 months ago)	Attempts against HTTP/HTTPS	Web App Attack
Anonymous	2026-03-26 04:32:10 (3 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 octageeks.com	2026-03-26 04:14:32 (3 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 ambor	2026-03-26 00:00:40 (3 months ago)	Honeypot access: Environment file access attempt. Path: /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-03-25 23:48:39 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 156.146.39.136 (unn-156-146-39-136.cdn77.com): ... show more (mod_security) mod_security (id:210492) triggered by 156.146.39.136 (unn-156-146-39-136.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 19:48:33.189155 2026] [security2:error] [pid 29314:tid 29314] [client 156.146.39.136:31966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dunbartonucc.org"] [uri "/.env"] [unique_id "acR0US0_rsDSfh1tJMXFKgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 konseptit	2026-03-25 23:33:34 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 156.146.39.136 (US/United States/unn-15 ... show more (mod_security) mod_security triggered on hostname [redacted] 156.146.39.136 (US/United States/unn-156-146-39-136.cdn77.com) show less	SQL Injection
🇩🇪 bescared	2026-03-25 23:32:00 (3 months ago)	Malicious activity detected: URL probing.	Bad Web Bot Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-03-25 23:31:35 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 156.146.39.136 (unn-156-146-39-136.cdn77.com): ... show more (mod_security) mod_security (id:210492) triggered by 156.146.39.136 (unn-156-146-39-136.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 19:31:27.990167 2026] [security2:error] [pid 10575:tid 10575] [client 156.146.39.136:15469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4md.lol"] [uri "/.env"] [unique_id "acRwT_RB9b9QtsuxgQCoHQAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 ipidentify	2026-03-25 23:30:31 (3 months ago)	2026-03-25T23:30:31Z GET /.env	Web App Attack
🇫🇮 stinpriza	2026-03-25 23:21:56 (3 months ago)	Web App Attack	Web App Attack
🇦🇺 2000cn.com.au	2026-03-25 23:17:58 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-03-25 23:05:00 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Cloud secrets probing show less	Bad Web Bot Web App Attack
🇩🇪 SwinT	2026-03-25 23:00:07 (3 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-03-25 22:53:05 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 156.146.39.136 (unn-156-146-39-136.cdn77.com): ... show more (mod_security) mod_security (id:210492) triggered by 156.146.39.136 (unn-156-146-39-136.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 18:52:56.564557 2026] [security2:error] [pid 7425:tid 7425] [client 156.146.39.136:51302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soglove.com"] [uri "/.env"] [unique_id "acRnSHCHqw5R1PH855-X6wAAABk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 2a01:5a8:306:b11d:35f2:46f2:f3a6:3227

🇧🇪 34.78.189.165

🇧🇷 201.63.223.141

🇦🇲 195.250.79.2

🇺🇸 162.216.149.228

🇩🇪 94.134.192.135

🇺🇸 64.62.156.97

🇧🇩 59.152.6.52

🇨🇦 51.161.37.62

🇳🇱 34.7.247.203

🇰🇷 8.213.146.25

🇨🇳 180.184.134.158

🇫🇷 176.31.139.2

🇺🇸 162.216.150.65

🇺🇸 145.132.99.129

🇩🇪 84.233.195.152

🇺🇸 66.132.195.55

🇨🇳 47.103.51.41

🇵🇱 45.159.21.25

🇳🇱 45.148.10.147