JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.162.168.252

39.162.168.252 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 4%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24445
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.162.168.252

Whois 39.162.168.252

IP Abuse Reports for 39.162.168.252:

This IP address has been reported a total of 9 times from 2 distinct sources. 39.162.168.252 was first reported on April 9th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-13 20:36:16 (3 days ago)	(mod_security) mod_security (id:210831) triggered by 39.162.168.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 39.162.168.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 16:36:07.877099 2026] [security2:error] [pid 22363:tid 22416] [client 39.162.168.252:42057] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|jeterfamilytravel.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "jeterfamilytravel.com"] [uri "/"] [unique_id "alVMNy18A-0F4JBddyxDoQAAAUI"], referer: http://jeterfamilytravel.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 10:47:23 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 39.162.168.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 39.162.168.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 06:47:16.191432 2026] [security2:error] [pid 16900:tid 16900] [client 39.162.168.252:23665] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|bmbb1.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "bmbb1.com"] [uri "/index.htm"] [unique_id "ak98NECVlXOFenBBNrFq0QAAAAI"], referer: http://bmbb1.com/index.htm show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 03:54:39 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 39.162.168.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 39.162.168.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 23:54:31.592361 2026] [security2:error] [pid 4324:tid 4354] [client 39.162.168.252:42387] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|idwic.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "idwic.com"] [uri "/"] [unique_id "ak3J9_0L6h55fH1hqCvFwQAAABg"], referer: http://idwic.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 23:55:06 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 39.162.168.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 39.162.168.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 19:54:59.406485 2026] [security2:error] [pid 17929:tid 17929] [client 39.162.168.252:18181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|delta-pizza.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "delta-pizza.com"] [uri "/"] [unique_id "ak2R0z_NsjyJkB1wHIs8bgAAAAA"], referer: http://delta-pizza.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 01:44:17 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 39.162.168.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 39.162.168.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 21:44:11.447429 2026] [security2:error] [pid 31827:tid 31827] [client 39.162.168.252:18410] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|w0kem.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "w0kem.com"] [uri "/"] [unique_id "akXCa5bVL-y2K-8gHj40DgAAAAU"], referer: http://w0kem.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-11-04 23:06:59 (8 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/39.162.168.252 2025-11-04 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/39.162.168.252 2025-11-04 14:44:08 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2025-10-06 22:53:59 (9 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/39.162.168.252 2025-10-06 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/39.162.168.252 2025-10-06 02:18:06 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-25 23:21:35 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/39.162.168.252 2025-04-25 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/39.162.168.252 2025-04-25 17:37:16 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-09 23:25:09 (1 year ago)	ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/39.162.168.252 2025-04-09 13 ... show more ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/39.162.168.252 2025-04-09 13:22:24 /config.json show less	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 113.201.65.26

🇮🇳 103.176.255.195

🇳🇱 91.148.245.81

🇧🇪 198.235.24.247

🇺🇸 151.247.65.231

🇮🇳 103.55.89.5

🇮🇱 82.102.149.88

🇳🇱 45.148.10.152

🇷🇺 212.164.64.118

🇧🇷 177.137.102.138

🇩🇪 167.94.146.45

🇷🇴 151.242.30.210

🇺🇸 64.62.197.177

🇺🇸 34.186.56.200

🇰🇷 211.224.82.142

🇩🇪 185.242.3.226

🇨🇳 60.166.83.71

🇺🇸 54.210.152.179

🇬🇧 45.82.76.131

🇩🇪 43.228.157.10