JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 58.255.236.118

58.255.236.118 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 4%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 58.255.236.118

Whois 58.255.236.118

IP Abuse Reports for 58.255.236.118:

This IP address has been reported a total of 7 times from 1 distinct source. 58.255.236.118 was first reported on January 30th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 23:46:32 (4 days ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 19:46:26.491258 2026] [security2:error] [pid 3120:tid 3120] [client 58.255.236.118:5056] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|makeupandwardrobe.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "makeupandwardrobe.com"] [uri "/"] [unique_id "akmbUveWcbaI66nElutGXgAAABc"], referer: http://makeupandwardrobe.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 21:34:53 (4 days ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 17:34:44.963904 2026] [security2:error] [pid 19853:tid 19853] [client 58.255.236.118:4370] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.antimu.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.antimu.com"] [uri "/"] [unique_id "akl8dPbI8XISqZ93M-cq9wAAABE"], referer: http://www.antimu.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 04:35:43 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 00:35:39.608733 2026] [security2:error] [pid 2876:tid 2876] [client 58.255.236.118:8082] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|ineedafriend.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ineedafriend.com"] [uri "/"] [unique_id "akNHmzvkZwBqkL8IBwSk-QAAABM"], referer: http://ineedafriend.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 05:51:13 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 01:51:09.222393 2026] [security2:error] [pid 670:tid 670] [client 58.255.236.118:8637] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.kerbros.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.kerbros.com"] [uri "/"] [unique_id "akIHzaUeiMhmBOyAFPN8ogAAABA"], referer: https://www.kerbros.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 11:23:46 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 07:23:40.522809 2026] [security2:error] [pid 23677:tid 23677] [client 58.255.236.118:12355] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|maledon.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "maledon.com"] [uri "/"] [unique_id "ahbUPLptpke8DdFBuL1hjgAAAAc"], referer: http://maledon.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 02:39:05 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 21:38:59.850232 2026] [security2:error] [pid 8338:tid 8338] [client 58.255.236.118:2386] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.mymuscles.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.mymuscles.com"] [uri "/"] [unique_id "aYlIwzzUCybwYGPUS3n9EAAAABo"], referer: http://www.mymuscles.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-30 20:58:31 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 15:58:26.319426 2026] [security2:error] [pid 125956:tid 125956] [client 58.255.236.118:1568] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|misomayo.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "misomayo.com"] [uri "/"] [unique_id "aX0bcl3ylz8e-fzTSz1S6gAAAB4"], referer: http://misomayo.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.131

🇹🇼 198.235.24.111

🇮🇳 185.100.212.141

🇨🇳 182.151.12.68

🇫🇮 147.185.133.243

🇺🇸 134.209.120.216

🇸🇬 101.32.245.235

🇹🇷 94.154.43.181

🇳🇱 85.137.56.197

🇨🇦 51.79.65.194

🇬🇧 5.226.140.15

🇺🇸 216.26.229.1

🇻🇪 179.63.39.124

🇺🇸 167.99.148.102

🇺🇸 167.71.24.129

🇸🇬 162.158.108.81

🇭🇰 118.193.36.107

🇨🇳 106.13.105.183

🇨🇳 103.213.95.198

🇸🇬 103.189.235.93