JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.148.48.185

39.148.48.185 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 5%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24445
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.148.48.185

Whois 39.148.48.185

IP Abuse Reports for 39.148.48.185:

This IP address has been reported a total of 5 times from 2 distinct sources. 39.148.48.185 was first reported on November 17th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-15 20:14:18 (3 hours ago)	(mod_security) mod_security (id:210831) triggered by 39.148.48.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.148.48.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 16:14:11.312140 2026] [security2:error] [pid 26905:tid 26905] [client 39.148.48.185:40564] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|barigby.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "barigby.com"] [uri "/"] [unique_id "ajBdE5rVdxccxhk8yABDTgAAABg"], referer: https://barigby.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 07:52:34 (15 hours ago)	(mod_security) mod_security (id:210831) triggered by 39.148.48.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.148.48.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:52:29.147312 2026] [security2:error] [pid 30150:tid 30150] [client 39.148.48.185:40353] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|rgvatvrepair.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "rgvatvrepair.com"] [uri "/"] [unique_id "ai-vPeXYfg5AqP6wwo-W7AAAAAg"], referer: https://rgvatvrepair.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 20:58:52 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 39.148.48.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.148.48.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:58:47.147811 2026] [security2:error] [pid 21322:tid 21322] [client 39.148.48.185:40282] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|aquatech-ind.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "aquatech-ind.com"] [uri "/"] [unique_id "ai8WB99U6DGGoKM55zlWewAAAAk"], referer: https://aquatech-ind.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 20:21:12 (4 days ago)	(mod_security) mod_security (id:210831) triggered by 39.148.48.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.148.48.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 16:21:05.417608 2026] [security2:error] [pid 5956:tid 5956] [client 39.148.48.185:22229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|arriagarealestate.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "arriagarealestate.com"] [uri "/"] [unique_id "aisYsZ8MSvnzcNx4YLXp2gAAAAE"], referer: https://arriagarealestate.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-11-17 00:38:25 (6 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/39.148.48.185 2025-11-16 20 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/39.148.48.185 2025-11-16 20:24:38 /sitemap.xml show less	Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.196.160.30

🇪🇸 217.76.155.144

🇺🇸 206.189.205.85

🇪🇬 197.60.255.7

🇮🇶 185.166.25.150

🇩🇪 167.94.146.48

🇱🇹 81.30.98.75

🇳🇱 45.148.10.157

🇧🇩 103.65.240.34

🇨🇳 101.37.66.76

🇳🇱 91.92.40.123

🇸🇬 47.128.112.32

🇺🇸 45.130.83.19

🇳🇱 34.12.22.128

🇷🇴 2.57.122.177

🇧🇷 191.9.120.9

🇺🇸 172.190.51.254

🇧🇼 168.167.228.123

🇺🇸 165.154.235.9

🇺🇸 152.32.234.39