JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.156.46.139

185.156.46.139 was found in our database!

This IP was reported 426 times. Confidence of Abuse is 100%: ?

100%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-185-156-46-139.datapacket.com
Domain Name	datacamp.co.uk
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.156.46.139

Whois 185.156.46.139

IP Abuse Reports for 185.156.46.139:

This IP address has been reported a total of 426 times from 89 distinct sources. 185.156.46.139 was first reported on March 31st 2023, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 walnuts	2026-06-04 09:32:50 (19 hours ago)	Automated: Triggered nginx security jail (nginx-444) - probing blocked paths on web server	Bad Web Bot Web App Attack
🇺🇸 LSPCCU	2026-06-02 01:01:45 (3 days ago)	TSEC Honeypot Network report. Threat score: 98/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 98/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: 185. show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇩🇪 CELOS-SOC	2026-05-31 04:31:32 (5 days ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
Anonymous	2026-05-30 18:44:56 (5 days ago)	"GET /.vscode/sftp.json HTTP/1.0"	Hacking Web App Attack
Anonymous	2026-05-30 15:52:21 (5 days ago)	Reported from Nginx log analysis 16. Log: 185.156.46.139 - - [30/May/2026:xx:xx:xx 0200] "GET /.vsc ... show more Reported from Nginx log analysis 16. Log: 185.156.46.139 - - [30/May/2026:xx:xx:xx 0200] "GET /.vscode/launch.json HTTP/1.0" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" "US United States Ashburn" "AS212238" "Datacamp Limited" show less	Port Scan Brute-Force SSH
🇫🇷 masterguru	2026-05-30 14:11:52 (5 days ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 185.156.46.139 (US/United States/unn-185-156-4 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 185.156.46.139 (US/United States/unn-185-156-46-139.datapacket.com): 1 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 sdos.es	2026-05-30 13:13:00 (5 days ago)	"Restricted File Access Attempt - Matched Data: .bash_history found within REQUEST_FILENAME: /.bash_ ... show more "Restricted File Access Attempt - Matched Data: .bash_history found within REQUEST_FILENAME: /.bash_history" show less	Web App Attack
🇩🇪 CELOS-SOC	2026-05-22 20:31:35 (1 week ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 Ba-Yu	2026-05-21 05:10:34 (2 weeks ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇹🇷 baku.hosting	2026-05-21 03:09:22 (2 weeks ago)	CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 185.156.46.139 (US/United Stat ... show more CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 185.156.46.139 (US/United States/unn-185-156-46-139.datapacket.com): 5 in the last 3600 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 22:58:44 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 185.156.46.139 (unn-185-156-46-139.datapacket.c ... show more (mod_security) mod_security (id:210492) triggered by 185.156.46.139 (unn-185-156-46-139.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 18:58:38.694086 2026] [security2:error] [pid 4072:tid 4078] [client 185.156.46.139:56168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newyorkgazette.com"] [uri "/.env"] [unique_id "ag48ngMvNNFN-XerH-6SHwAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Major Hostility	2026-05-20 22:00:07 (2 weeks ago)	"GET /.env HTTP/1.1" 404 "GET /.env HTTP/1.1" 404	Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 21:50:07 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 185.156.46.139 (unn-185-156-46-139.datapacket.c ... show more (mod_security) mod_security (id:210492) triggered by 185.156.46.139 (unn-185-156-46-139.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:50:03.308512 2026] [security2:error] [pid 32417:tid 32417] [client 185.156.46.139:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "archive.yggdrasil.org"] [uri "/.env"] [unique_id "ag4sixFNpMbFdZaRVlZ-pAAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2026-05-20 21:39:56 (2 weeks ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 185.156.46.139 (US/Unite ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 185.156.46.139 (US/United States/unn-185-156-46-139.datapacket.com) show less	Port Scan
Anonymous	2026-05-20 21:10:02 (2 weeks ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 426 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:f806:9::

🇪🇹 196.188.116.56

🇧🇷 185.194.204.183

🇺🇸 173.255.223.32

🇺🇸 172.253.251.153

🇺🇸 91.230.168.32

🇵🇱 87.251.64.176

🇨🇳 220.250.52.101

🇨🇳 203.6.235.51

🇺🇸 195.184.76.231

🇧🇷 186.233.118.22

🇵🇪 161.132.50.236

🇺🇸 147.185.132.178

🇨🇦 85.217.149.15

🇺🇸 66.180.194.227

🇸🇬 47.79.51.96

🇧🇪 34.53.183.125

🇸🇬 8.219.180.8

🇱🇰 220.247.224.226

🇮🇩 182.23.57.242