JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.146.39.206

156.146.39.206 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 1%: ?

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-156-146-39-206.cdn77.com
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.146.39.206

Whois 156.146.39.206

IP Abuse Reports for 156.146.39.206:

This IP address has been reported a total of 13 times from 11 distinct sources. 156.146.39.206 was first reported on February 13th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-06-30 23:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 156.146.39.206. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 156.146.39.206. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-30 22:00:09 (2 weeks ago)	Zimbra: Login failures from malicious IP: 156.146.39.206. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 156.146.39.206. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇨🇭 dispaisyenterprises	2025-09-23 06:04:11 (9 months ago)	Honeypot hit: Unauthorized traffic (32 bytes of payload); 5083 [11] TCP	Port Scan
🇵🇱 sefinek.net	2025-07-17 06:37:54 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 oncord	2025-05-27 17:25:14 (1 year ago)	Form spam	Web Spam
🇯🇵 doll.gl	2025-02-16 09:29:05 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/CVE-2017-9841	Web App Attack
🇧🇪 cmbplf	2025-02-15 15:59:45 (1 year ago)	6.936 4xx requests in 1 hour (3d5h30m)	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2025-02-15 10:11:50 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 156.146.39.206 (unn-156-146-39-206.cdn77.com): ... show more (mod_security) mod_security (id:210492) triggered by 156.146.39.206 (unn-156-146-39-206.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 15 05:11:43.830028 2025] [security2:error] [pid 3051242:tid 3051242] [client 156.146.39.206:51759] [client 156.146.39.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clisanchezenterprises.com"] [uri "/css/wp-config.php"] [unique_id "Z7BoX0Ag7m2orMZGv8lZVAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-02-15 08:31:08 (1 year ago)	Multiple WAF Violations	Web App Attack
🇵🇱 rafamiga	2025-02-14 07:37:00 (1 year ago)	[156.146.39.206 US] .pl [14/Feb/2025:07:37:00 +0000] "GET /1.php HTTP/1.1" 404 341 "Mozilla/5.0 (Wi ... show more [156.146.39.206 US] .pl [14/Feb/2025:07:37:00 +0000] "GET /1.php HTTP/1.1" 404 341 "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" [156.146.39.206 US] .pl [14/Feb/2025:07:37:01 +0000] "GET /test.php HTTP/1.1" 404 341 "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" [156.146.39.206 US] .pl [14/Feb/2025:07:37:01 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 404 341 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" [156.146.39.206 US] .pl [14/Feb/2025:07:37:01 +0000] "GET /baxa1.php HTTP/1.1" 404 341 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" [156.146.39.206 US] .pl [14/Feb/2025:07:37:02 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 404 341 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome… show less	Port Scan
🇺🇸 TPI-Abuse	2025-02-13 16:08:23 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 156.146.39.206 (unn-156-146-39-206.cdn77.com): ... show more (mod_security) mod_security (id:210492) triggered by 156.146.39.206 (unn-156-146-39-206.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 13 11:08:20.210986 2025] [security2:error] [pid 19868:tid 19868] [client 156.146.39.206:62307] [client 156.146.39.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web233.dnchosting.com"] [uri "/css/wp-config.php"] [unique_id "Z64Y9JPmtv0nM8KRdL17UQAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2025-02-13 15:48:34 (1 year ago)	156.146.39.206 - - [13/Feb/2025:15:48:31 +0000] "GET /1.php HTTP/1.0" 404 180 "-" "Mozilla/5.0 (Wind ... show more 156.146.39.206 - - [13/Feb/2025:15:48:31 +0000] "GET /1.php HTTP/1.0" 404 180 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.39.206 - - [13/Feb/2025:15:48:31 +0000] "GET /test.php HTTP/1.0" 404 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" ... show less	Hacking Web App Attack
Anonymous	2025-02-13 14:52:16 (1 year ago)	Excessive connections to http/https ports	DDoS Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 175.119.225.68

🇲🇦 81.192.46.29

🇳🇱 213.152.161.54

🇳🇱 205.147.16.227

🇭🇳 190.242.27.80

🇵🇱 166.88.56.90

🇺🇸 162.216.150.241

🇫🇷 157.173.104.13

🇺🇸 146.88.240.148

🇺🇸 107.136.239.174

🇺🇸 91.230.168.129

🇳🇱 45.148.10.141

🇺🇸 45.132.115.221

🇺🇸 24.35.171.8

🇭🇰 218.102.148.139

🇨🇭 209.99.186.233

🇺🇸 198.74.53.109

🇺🇸 196.51.184.171

🇺🇸 172.238.160.104

🇺🇸 165.232.159.168