JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.149.250.12

39.149.250.12 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24445
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.149.250.12

Whois 39.149.250.12

IP Abuse Reports for 39.149.250.12:

This IP address has been reported a total of 14 times from 13 distinct sources. 39.149.250.12 was first reported on December 21st 2022, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-24 04:19:30 (11 months ago)	(mod_security) mod_security (id:210350) triggered by 39.149.250.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 39.149.250.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 00:19:23.339615 2025] [security2:error] [pid 23224:tid 23224] [client 39.149.250.12:47960] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/13901"] [unique_id "aNNxS9-Vp3BkeRxVOUKo9QAAADM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2022-12-27 16:19:33 (3 years ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/39.149.250.12	SSH
🇩🇪 ipcop.net	2022-12-27 11:42:56 (3 years ago)	Dec 27 07:42:56 router01.gfa-steriltechnik.de sshd[1084347]: Disconnected from authenticating user r ... show more Dec 27 07:42:56 router01.gfa-steriltechnik.de sshd[1084347]: Disconnected from authenticating user root 39.149.250.12 port 29561 [preauth] Dec 27 07:42:56 router01.gfa-steriltechnik.de sshd[1084349]: Disconnected from authenticating user root 39.149.250.12 port 29567 [preauth] Dec 27 07:42:56 router01.gfa-steriltechnik.de sshd[1084352]: Disconnected from authenticating user root 39.149.250.12 port 29582 [preauth] Dec 27 07:42:56 router01.gfa-steriltechnik.de sshd[1084345]: Disconnected from authenticating user root 39.149.250.12 port 29549 [preauth] Dec 27 07:42:56 router01.gfa-steriltechnik.de sshd[1084346]: Disconnected from authenticating user root 39.149.250.12 port 29556 [preauth] show less	Brute-Force
🇬🇧 yourdreamnet.co.uk	2022-12-26 05:19:09 (3 years ago)		Brute-Force SSH
🇺🇸 didyouexpectthat	2022-12-26 01:32:03 (3 years ago)	Dec 25 22:32:03 proxmoxia sshd[492246]: refused connect from 39.149.250.12 (39.149.250.12) Dec 25 22 ... show more Dec 25 22:32:03 proxmoxia sshd[492246]: refused connect from 39.149.250.12 (39.149.250.12) Dec 25 22:32:03 proxmoxia sshd[492249]: refused connect from 39.149.250.12 (39.149.250.12) Dec 25 22:32:03 proxmoxia sshd[492252]: refused connect from 39.149.250.12 (39.149.250.12) Dec 25 22:32:03 proxmoxia sshd[492253]: refused connect from 39.149.250.12 (39.149.250.12) Dec 25 22:32:03 proxmoxia sshd[492254]: refused connect from 39.149.250.12 (39.149.250.12) ... show less	Brute-Force SSH
Anonymous	2022-12-23 10:03:51 (3 years ago)	Dec 23 16:03:49 hofman06 sshd[3360374]: Failed password for root from 39.149.250.12 port 29058 ssh2 ... show more Dec 23 16:03:49 hofman06 sshd[3360374]: Failed password for root from 39.149.250.12 port 29058 ssh2 Dec 23 16:03:48 hofman06 sshd[3360377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.149.250.12 user=root Dec 23 16:03:50 hofman06 sshd[3360377]: Failed password for root from 39.149.250.12 port 29205 ssh2 Dec 23 16:03:49 hofman06 sshd[3360585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.149.250.12 user=root Dec 23 16:03:51 hofman06 sshd[3360585]: Failed password for root from 39.149.250.12 port 29301 ssh2 ... show less	Brute-Force SSH
🇨🇭 flaus	2022-12-21 23:40:14 (3 years ago)	$f2bV_matches	Brute-Force SSH
🇨🇳 ThreatBook.io	2022-12-21 16:20:21 (3 years ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/39.149.250.12 2 ... show more ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/39.149.250.12 2022-12-21 15:46:09 ["cat /proc/uptime"] show less	Brute-Force
Anonymous	2022-12-21 12:42:15 (3 years ago)	Dec 21 18:41:46 C1D543E sshd[1103288]: User root from 39.149.250.12 not allowed because not listed i ... show more Dec 21 18:41:46 C1D543E sshd[1103288]: User root from 39.149.250.12 not allowed because not listed in AllowUsers Dec 21 18:41:46 C1D543E sshd[1103288]: Failed password for invalid user root from 39.149.250.12 port 29691 ssh2 Dec 21 18:42:02 C1D543E sshd[1103294]: User root from 39.149.250.12 not allowed because not listed in AllowUsers Dec 21 18:42:02 C1D543E sshd[1103294]: Failed password for invalid user root from 39.149.250.12 port 29625 ssh2 Dec 21 18:42:15 C1D543E sshd[1103305]: User root from 39.149.250.12 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇫🇷 balsakup.fr	2022-12-21 05:23:50 (3 years ago)	web-1 [ssh] SSH Attack	Brute-Force SSH
🇫🇷 Max la Menace	2022-12-21 05:23:13 (3 years ago)	SSH Brute Force (F)	Brute-Force SSH
🇫🇷 Johan	2022-12-21 05:22:55 (3 years ago)	2022-12-21T11:22:52.246551+01:00 ks3355764 sshd[14277]: pam_unix(sshd:auth): authentication failure; ... show more 2022-12-21T11:22:52.246551+01:00 ks3355764 sshd[14277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.149.250.12 user=root 2022-12-21T11:22:54.237863+01:00 ks3355764 sshd[14277]: Failed password for root from 39.149.250.12 port 29373 ssh2 ... show less	Brute-Force SSH
🇩🇪 Shadowcloud	2022-12-21 04:40:32 (3 years ago)	Unauthorized SSH connection attempt detected / 3 attempts (via Fail2Ban)	Port Scan Brute-Force SSH
🇩🇪 www.blocklist.de	2022-12-21 03:00:38 (3 years ago)	Dec 21 08:53:07 eisenhower sshd[2197161]: refused connect from 39.149.250.12 (39.149.250.12) Dec 21 ... show more Dec 21 08:53:07 eisenhower sshd[2197161]: refused connect from 39.149.250.12 (39.149.250.12) Dec 21 08:53:08 eisenhower sshd[2197162]: refused connect from 39.149.250.12 (39.149.250.12) Dec 21 08:53:08 eisenhower sshd[2197163]: refused connect from 39.149.250.12 (39.149.250.12) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=39.149.250.12 show less	FTP Brute-Force Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 34.145.160.19

🇨🇳 2400:7fc0:82c0:802:6666:8b85:c001:e59d

🇷🇺 213.189.219.79

🇺🇸 206.204.49.234

🇺🇦 46.175.252.10

🇧🇪 198.235.24.208

🇸🇪 171.25.158.58

🇧🇷 170.238.160.191

🇺🇸 154.28.195.146

🇺🇸 138.197.36.130

🇲🇾 124.13.195.5

🇨🇳 106.75.227.248

🇯🇵 101.33.55.172

🇺🇦 91.225.234.191

🇹🇭 49.231.192.36

🇺🇸 45.79.163.53

🇧🇪 35.241.202.92

🇬🇧 35.203.211.220

🇺🇸 20.169.84.243

🇩🇪 94.136.179.47