JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 58.253.230.197

58.253.230.197 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 3%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 58.253.230.197

Whois 58.253.230.197

IP Abuse Reports for 58.253.230.197:

This IP address has been reported a total of 7 times from 2 distinct sources. 58.253.230.197 was first reported on April 15th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-24 05:06:22 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 58.253.230.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.253.230.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 01:06:17.528483 2026] [security2:error] [pid 22558:tid 22558] [client 58.253.230.197:51395] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.pjbruner.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pjbruner.com"] [uri "/"] [unique_id "aovRSVOPlgn3Mb6ECQsONAAAAAk"], referer: http://www.pjbruner.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 22:39:25 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 58.253.230.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.253.230.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 18:39:21.491128 2026] [security2:error] [pid 3018:tid 3018] [client 58.253.230.197:41847] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|veracurnow.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "veracurnow.com"] [uri "/"] [unique_id "ajXFGdKyrDeMdhAAiwMWbwAAAAI"], referer: https://veracurnow.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 03:57:22 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 58.253.230.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.253.230.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 23:57:13.303142 2026] [security2:error] [pid 18787:tid 18787] [client 58.253.230.197:42750] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|hatfulofrain.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "hatfulofrain.com"] [uri "/"] [unique_id "ajDJmQp8BaeiqIUWU9nuSwAAAB4"], referer: http://hatfulofrain.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 04:56:03 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 58.253.230.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.253.230.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 00:55:57.617248 2026] [security2:error] [pid 3046:tid 3057] [client 58.253.230.197:35952] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ethicmark.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ethicmark.org"] [uri "/"] [unique_id "adSOXb4Je2Hbi2IhiGrlygAAAAU"], referer: https://www.ethicmark.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-27 23:48:52 (6 months ago)	(mod_security) mod_security (id:210831) triggered by 58.253.230.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.253.230.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 18:48:48.226971 2026] [security2:error] [pid 19160:tid 19160] [client 58.253.230.197:57168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|janaia.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "janaia.com"] [uri "/index.htm"] [unique_id "aaItYGpQzfMUi9KQjjoZ0QAAACU"], referer: http://janaia.com/index.htm show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-07-20 00:43:29 (1 year ago)	ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/58.253.230.197 2025 ... show more ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/58.253.230.197 2025-07-19 08:05:18 /config.json show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-15 01:38:45 (1 year ago)	ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/58.253.230.197 2025 ... show more ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/58.253.230.197 2025-04-14 04:25:18 /robots.txt show less	Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:332::14e

🇨🇳 221.236.21.62

🇮🇳 177.177.116.102

🇺🇸 172.174.236.56

🇳🇱 45.148.10.152

🇺🇸 40.124.187.3

🇮🇪 18.203.233.223

🇩🇪 2.26.172.97

🇫🇮 147.185.133.60

🇳🇱 85.11.167.191

🇷🇴 80.94.92.234

🇺🇸 2001:470:1:c84::28a

🇸🇪 217.60.78.71

🇺🇸 216.218.206.69

🇭🇰 199.45.154.69

🇺🇸 195.184.76.20

🇸🇬 187.13.195.56

🇫🇷 147.79.21.59

🇵🇹 85.139.201.75

🇺🇸 71.235.27.139