JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.184.194.149

39.184.194.149 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 41%: ?

41%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS56041
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.184.194.149

Whois 39.184.194.149

IP Abuse Reports for 39.184.194.149:

This IP address has been reported a total of 35 times from 30 distinct sources. 39.184.194.149 was first reported on May 4th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 Gigi	2026-06-21 17:47:30 (3 weeks ago)	CrowdSec automatic ban \| Scenario: local/persistent-scanner \| Duration: 4h \| Origin: crowdsec \| Dete ... show more CrowdSec automatic ban \| Scenario: local/persistent-scanner \| Duration: 4h \| Origin: crowdsec \| Detected by OPNsense firewall (Beast home network security) show less	Port Scan Hacking
🇺🇸 ISPLtd	2026-06-21 05:28:44 (3 weeks ago)	Jun 20 23:28:44 39.184.194.149 TCP SPT=55621 DPT=8082 SYN Jun 20 23:28:44 39.184.194.149 TCP SPT=268 ... show more Jun 20 23:28:44 39.184.194.149 TCP SPT=55621 DPT=8082 SYN Jun 20 23:28:44 39.184.194.149 TCP SPT=26875 DPT=8001 SYN Jun 20 23:28:44 39.184.194.149 TCP SPT=54429 DPT=8002 WINDO ... show less	Port Scan
🇩🇪 _ArminS_	2026-06-19 19:50:53 (3 weeks ago)	WEB-Scan 65137:80 detected 2026.06.19 21:50:53 blocked until 2026.08.08 14:53:40	Port Scan
🇳🇱 soverin	2026-06-19 15:59:50 (3 weeks ago)	Network scan on port 443	Email Spam
🇱🇹 NotACaptcha	2026-06-19 03:07:28 (3 weeks ago)	Unauthorised access (Jun 19 06:07) SRC=39.184.194.149 LEN=60 TTL=43 ID=42633 DF TCP DPT=8080 WINDOW= ... show more Unauthorised access (Jun 19 06:07) SRC=39.184.194.149 LEN=60 TTL=43 ID=42633 DF TCP DPT=8080 WINDOW=64240 SYN show less	Port Scan
🇩🇪 mueller-nils.com	2026-06-05 07:53:23 (1 month ago)	Jun 5 09:53:22 [host] kernel: [3754788.633425] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=39.184.194.149 DS ... show more Jun 5 09:53:22 [host] kernel: [3754788.633425] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=39.184.194.149 DST=[munged] LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=57468 DF PROTO=TCP SPT=55979 DPT=9000 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 5 09:53:22 [host] kernel: [3 show less	Port Scan
🇬🇧 pearbright	2026-06-03 19:21:32 (1 month ago)	2026-06-03T19:21:32.110782+00:00 srv1093252 kernel: [1260485.809222] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-06-03T19:21:32.110782+00:00 srv1093252 kernel: [1260485.809222] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=39.184.194.149 DST=72.61.19.109 LEN=60 TOS=0x08 PREC=0x20 TTL=44 ID=38624 DF PROTO=TCP SPT=4247 DPT=9000 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-03T19:21:32.111156+00:00 srv1093252 kernel: [1260485.810238] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=39.184.194.149 DST=72.61.19.109 LEN=60 TOS=0x08 PREC=0x20 TTL=44 ID=52381 DF PROTO=TCP SPT=14151 DPT=8188 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-03T19:21:32.111189+00:00 srv1093252 kernel: [1260485.812128] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=39.184.194.149 DST=72.61.19.109 LEN=60 TOS=0x08 PREC=0x20 TTL=44 ID=3928 DF PROTO=TCP SPT=13555 DPT=10000 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-03T19:21:32.153546+00:00 srv1093252 kernel: [1260485.851713] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=39.18 ... show less	Port Scan
🇧🇷 marlorodrigues	2026-06-03 19:18:45 (1 month ago)	Brute Force SSH or Port Scan	Port Scan
🇦🇺 Starburst SysOp Team	2026-06-03 16:02:01 (1 month ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-syd2-4)	Hacking Bad Web Bot
🇨🇦 Slackin' Jack	2026-06-03 08:08:22 (1 month ago)	Triggered honeypot on port 10000. (39.184.194.149)	Port Scan
🇸🇰 DSSYSTEMS	2026-06-02 09:34:58 (1 month ago)	Automatic report from DSS firewall log.	Port Scan Hacking Brute-Force
🇫🇷 ISPLtd	2026-06-02 01:45:54 (1 month ago)	Jun 1 22:45:53 39.184.194.149 TCP SPT=17963 DPT=8190 SYN Jun 1 22:45:53 39.184.194.149 TCP SPT=538 ... show more Jun 1 22:45:53 39.184.194.149 TCP SPT=17963 DPT=8190 SYN Jun 1 22:45:53 39.184.194.149 TCP SPT=53817 DPT=8189 SYN Jun 1 22:45:53 39.184.194.149 TCP SPT=18071 DPT=8000 ... show less	Port Scan
🇫🇷 ISPLtd	2026-06-02 00:35:24 (1 month ago)	Jun 1 21:35:24 39.184.194.149 TCP SPT=54189 DPT=8189 SYN Jun 1 21:35:24 39.184.194.149 TCP SPT=164 ... show more Jun 1 21:35:24 39.184.194.149 TCP SPT=54189 DPT=8189 SYN Jun 1 21:35:24 39.184.194.149 TCP SPT=1645 DPT=8080 SYN Jun 1 21:35:24 39.184.194.149 TCP SPT=3839 DPT=8188 ... show less	Port Scan
🇺🇸 mutebot.net	2026-06-01 15:40:35 (1 month ago)	SRC=39.184.194.149, PROTO=TCP, SPT=37419, DPT=8080	Port Scan
🇸🇰 GOVCERT	2026-05-31 07:26:26 (1 month ago)	Excessive Firewall Denies	DDoS Attack Web Spam

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.163.207

🇳🇱 45.148.10.240

🇺🇸 195.184.76.219

🇩🇪 178.105.77.12

🇺🇸 20.245.71.147

🇳🇱 193.176.31.218

🇳🇱 185.223.235.4

🇪🇸 171.22.10.239

🇺🇸 165.154.173.239

🇺🇸 134.199.220.130

🇳🇱 92.63.197.5

🇷🇺 91.226.62.121

🇳🇱 45.148.10.157

🇯🇵 43.165.168.5

🇺🇸 2620:0:9c0:121::

🇨🇳 218.25.89.208

🇺🇸 206.72.242.150

🇮🇳 202.164.38.250

🇹🇼 198.235.24.73

🇬🇧 193.32.209.242