JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.154.12.75

39.154.12.75 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 4%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Hohhot, Inner Mongolia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.154.12.75

Whois 39.154.12.75

IP Abuse Reports for 39.154.12.75:

This IP address has been reported a total of 11 times from 3 distinct sources. 39.154.12.75 was first reported on November 27th 2022, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-08 04:26:17 (6 days ago)	(mod_security) mod_security (id:210831) triggered by 39.154.12.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 39.154.12.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 00:26:07.726529 2026] [security2:error] [pid 32007:tid 32007] [client 39.154.12.75:31473] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.mariedjones.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.mariedjones.com"] [uri "/wordpress/"] [unique_id "aiZEX6lWuxzzjWZbtC2uWgAAABw"], referer: https://www.mariedjones.com/wordpress/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-11-16 01:03:08 (6 months ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/39.154.12.75 2025-11- ... show more ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/39.154.12.75 2025-11-15 22:27:33 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-11 01:10:48 (7 months ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/39.154.12.75 2025-11- ... show more ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/39.154.12.75 2025-11-10 00:48:56 / show less	Web App Attack
🇺🇸 TPI-Abuse	2025-09-13 19:30:31 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 39.154.12.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 39.154.12.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 15:30:22.615805 2025] [security2:error] [pid 16914:tid 16914] [client 39.154.12.75:18837] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/75721"] [unique_id "aMXGTvoKc43hGcM1H9iFAgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-12 12:08:18 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 39.154.12.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 39.154.12.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 08:08:08.706028 2025] [security2:error] [pid 11710:tid 11710] [client 39.154.12.75:4924] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/1370/game/49034"] [unique_id "aMQNKJ24_m9XGfwjbh5qGAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-06-04 01:09:39 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.154.12.75 2025-06- ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.154.12.75 2025-06-03 19:53:59 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-30 01:31:29 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.154.12.75 2025-05- ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.154.12.75 2025-05-29 12:23:41 /images/tongda.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-27 01:18:27 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.154.12.75 2025-05- ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.154.12.75 2025-05-26 06:08:38 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-25 02:30:08 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.154.12.75 2025-05- ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/39.154.12.75 2025-05-24 02:11:55 /robots.txt show less	Web App Attack
🇿🇦 IrisFlower	2023-04-25 19:50:01 (3 years ago)	Unauthorized connection attempt detected from IP address 39.154.12.75 to port 443 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2022-11-27 04:33:00 (3 years ago)	Unauthorized connection attempt detected from IP address 39.154.12.75 to port 443 [J]	Port Scan Hacking

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.107

🇰🇷 210.95.176.243

🇩🇪 193.124.20.254

🇺🇸 64.62.156.164

🇦🇺 34.40.188.97

🇺🇸 34.22.41.164

🇻🇳 14.225.7.70

🇺🇸 216.25.89.113

🇵🇰 175.107.1.64

🇨🇳 171.105.76.13

🇧🇷 138.255.157.62

🇨🇳 118.196.118.73

🇮🇪 108.130.34.107

🇮🇳 103.171.168.143

🇺🇸 100.28.153.226

🇺🇸 74.82.47.7

🇪🇸 46.24.47.94

🇸🇬 45.78.204.254

🇭🇺 37.76.2.87

🇮🇳 34.131.9.76