JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.154.11.243

39.154.11.243 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 11%: ?

11%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Hohhot, Inner Mongolia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.154.11.243

Whois 39.154.11.243

IP Abuse Reports for 39.154.11.243:

This IP address has been reported a total of 24 times from 9 distinct sources. 39.154.11.243 was first reported on March 30th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-24 19:50:06 (3 days ago)	(mod_security) mod_security (id:210831) triggered by 39.154.11.243 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.154.11.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 15:49:55.491363 2026] [security2:error] [pid 24320:tid 24320] [client 39.154.11.243:3429] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.grandvistalabs.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.grandvistalabs.com"] [uri "/"] [unique_id "ajw04_oEPENiWS2a9Ht3-QAAAAU"], referer: http://www.grandvistalabs.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 10:42:29 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 39.154.11.243 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 39.154.11.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:42:16.562366 2026] [security2:error] [pid 14617:tid 14617] [client 39.154.11.243:1528] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|wedeliverstrippers.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "wedeliverstrippers.com"] [uri "/"] [unique_id "ai_XCCWh9tR4V1e_0SGwggAAAA8"], referer: https://wedeliverstrippers.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-05 22:41:10 (1 month ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/39.154.11.243 2026-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/39.154.11.243 2026-05-05 23:01:02 /static/favicon.ico show less	Web App Attack
🇺🇸 MPL	2026-04-23 18:54:36 (2 months ago)	tcp/80	Port Scan
🇺🇸 RAP	2026-04-23 13:50:01 (2 months ago)	2026-04-23 13:50:01 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇺🇸 MPL	2026-04-08 21:45:03 (2 months ago)	tcp/8080	Port Scan
🇩🇪 KPS	2026-04-08 14:09:33 (2 months ago)	PortscanM	Port Scan
🇺🇸 MPL	2026-04-08 02:49:46 (2 months ago)	tcp/80	Port Scan
🇨🇦 design2web.ca	2026-04-07 15:20:40 (2 months ago)	[UniFi FW] Web application attack on port 80 (HTTP) \| Policy: Region Blocking \| Proto: TCP \| Src: 39 ... show more [UniFi FW] Web application attack on port 80 (HTTP) \| Policy: Region Blocking \| Proto: TCP \| Src: 39.154.11.243:23489 \| SrcRegion: CN \| Svc: HTTP \| Detected: 2026-04-07 14:52:16 UTC \| ISP: China Mobile \| D2W UniFi AbuseIPDB Reporter v2 show less	Port Scan
🇩🇪 KPS	2026-04-07 04:48:54 (2 months ago)	PortscanM	Port Scan
🇺🇸 MPL	2026-04-06 04:56:47 (2 months ago)	tcp/80	Port Scan
🇺🇸 MPL	2026-04-05 23:29:41 (2 months ago)	tcp/80 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-04-05 11:46:56 (2 months ago)	2026-04-05 11:46:56 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇺🇸 xmission.com	2026-04-05 11:08:53 (2 months ago)	Blocked by UFW (TCP on 80) Source port: 33898 TTL: 46 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 33898 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 39.154.11.243) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 arc21	2026-04-04 16:24:47 (2 months ago)	2026-04-04T16:24:47.204912+00:00 database-prodv1-game kernel: [2483815.869888] [UFW BLOCK] IN=eth0 O ... show more 2026-04-04T16:24:47.204912+00:00 database-prodv1-game kernel: [2483815.869888] [UFW BLOCK] IN=eth0 OUT= MAC=92:00:06:71:5d:8a:d2:74:7f:6e:37:e3:08:00 SRC=39.154.11.243 DST=142.132.169.25 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=7251 DF PROTO=TCP SPT=33463 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.132

🇺🇸 136.144.35.138

🇨🇳 202.194.98.228

🇬🇧 185.216.145.163

🇺🇸 172.64.217.218

🇺🇸 172.64.217.182

🇺🇸 172.64.217.37

🇺🇸 172.64.217.36

🇺🇸 162.216.149.152

🇺🇸 162.216.149.116

🇺🇸 151.246.221.249

🇺🇸 148.153.245.161

🇮🇱 147.234.96.149

🇸🇬 146.174.188.107

🇰🇷 61.80.247.39

🇳🇱 45.148.10.151

🇺🇸 45.63.4.69

🇨🇭 35.216.172.131

🇺🇸 34.172.97.49

🇸🇦 5.163.165.14