JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.149.92.253

39.149.92.253 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 4%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24445
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.149.92.253

Whois 39.149.92.253

IP Abuse Reports for 39.149.92.253:

This IP address has been reported a total of 6 times from 2 distinct sources. 39.149.92.253 was first reported on April 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 21:32:08 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 39.149.92.253 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.149.92.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 17:32:04.328151 2026] [security2:error] [pid 7095:tid 7095] [client 39.149.92.253:38050] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.hogprinter.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hogprinter.com"] [uri "/"] [unique_id "ak7B1JY4N0MwRgU7fhaHjwAAAAk"], referer: http://www.hogprinter.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 21:49:51 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 39.149.92.253 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.149.92.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 17:49:43.512382 2026] [security2:error] [pid 10479:tid 10479] [client 39.149.92.253:37524] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|vitalitywebb.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "vitalitywebb.com"] [uri "/"] [unique_id "akbc95Bqcuh94i9_BKI1JAAAAAk"], referer: https://vitalitywebb.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 01:31:03 (4 weeks ago)	(mod_security) mod_security (id:210831) triggered by 39.149.92.253 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.149.92.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 21:30:57.498641 2026] [security2:error] [pid 29799:tid 29799] [client 39.149.92.253:19427] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|iberhome.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "iberhome.net"] [uri "/"] [unique_id "aithUYH9eKepUsF3R1ixEgAAABY"], referer: http://iberhome.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 20:02:20 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 39.149.92.253 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.149.92.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 16:02:15.389016 2026] [security2:error] [pid 25012:tid 25012] [client 39.149.92.253:1806] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|airtechconsulting.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "airtechconsulting.com"] [uri "/"] [unique_id "ainCx3xFkfndbAJUF5c6YwAAAB8"], referer: https://airtechconsulting.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-10-05 22:48:04 (9 months ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.149.92.253 2025-10 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.149.92.253 2025-10-05 02:42:43 /images/favicons/webmin/favicon-16x16.png show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-01 00:16:51 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.149.92.253 2025-03 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.149.92.253 2025-03-31 02:19:26 /config.json show less	Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.40.200

🇰🇷 220.80.223.144

🇨🇳 218.92.201.254

🇨🇳 211.97.69.110

🇮🇳 205.254.163.156

🇫🇮 204.168.194.93

🇺🇸 198.46.198.61

🇨🇷 186.15.91.118

🇮🇳 172.253.222.209

🇺🇸 54.213.215.207

🇫🇮 45.87.249.146

🇺🇸 44.39.113.169

🇨🇳 39.97.249.70

🇮🇳 2405:201:8012:a1f6:751e:ff49:36b3:1ad7

🇬🇧 194.50.235.146

🇬🇧 193.46.0.107

🇮🇶 185.185.175.34

🇱🇦 183.182.116.80

🇧🇷 177.9.187.72

🇺🇸 162.158.174.207