JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.146.239.21

39.146.239.21 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 5%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Huainan, Anhui

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.146.239.21

Whois 39.146.239.21

IP Abuse Reports for 39.146.239.21:

This IP address has been reported a total of 5 times from 2 distinct sources. 39.146.239.21 was first reported on June 2nd 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-05 19:04:01 (1 hour ago)	(mod_security) mod_security (id:210831) triggered by 39.146.239.21 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.146.239.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 15:03:53.150334 2026] [security2:error] [pid 17999:tid 17999] [client 39.146.239.21:26733] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|programsforwedding.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "programsforwedding.com"] [uri "/"] [unique_id "akqqmVOSYUF3tO1H-HI-9AAAAB4"], referer: http://programsforwedding.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 19:21:56 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 39.146.239.21 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.146.239.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 15:21:50.082064 2026] [security2:error] [pid 17389:tid 17389] [client 39.146.239.21:26836] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.geno-med.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.geno-med.com"] [uri "/"] [unique_id "aj1_zlkaaPURk59UVALbMgAAAAs"], referer: http://www.geno-med.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 02:14:35 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 39.146.239.21 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.146.239.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 22:14:27.574920 2026] [security2:error] [pid 32287:tid 32287] [client 39.146.239.21:26743] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.civilwarzone.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.civilwarzone.com"] [uri "/"] [unique_id "ajnsAyRY3JDoNDHTbrh8WQAAAAI"], referer: https://www.civilwarzone.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 00:27:10 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 39.146.239.21 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.146.239.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:27:03.618894 2026] [security2:error] [pid 23842:tid 23842] [client 39.146.239.21:49260] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|thompsonboatworks.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thompsonboatworks.com"] [uri "/"] [unique_id "aZES1wasTmhPNvwLYaYVhwAAABk"], referer: http://thompsonboatworks.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-06-02 00:30:53 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/39.146.239.21 2025-06-01 14 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/39.146.239.21 2025-06-01 14:39:39 /favicon.ico show less	Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.241

🇩🇪 194.88.98.116

🇲🇽 187.191.48.23

🇨🇳 111.230.203.228

🇦🇷 200.63.168.92

🇧🇷 187.62.152.100

🇲🇽 177.230.176.224

🇩🇪 167.94.146.36

🇨🇳 123.53.251.97

🇨🇳 111.225.149.84

🇨🇳 111.225.149.82

🇨🇳 106.119.251.173

🇫🇷 91.196.152.202

🇺🇸 66.132.172.139

🇳🇱 45.156.87.50

🇳🇱 45.142.193.53

🇰🇷 211.246.160.21

🇨🇦 174.88.3.223

🇻🇳 171.244.141.86

🇧🇷 170.84.38.92