JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 58.255.236.206

58.255.236.206 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 4%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 58.255.236.206

Whois 58.255.236.206

IP Abuse Reports for 58.255.236.206:

This IP address has been reported a total of 8 times from 2 distinct sources. 58.255.236.206 was first reported on June 4th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-03 18:44:34 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 14:44:27.880709 2026] [security2:error] [pid 13054:tid 13054] [client 58.255.236.206:7781] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|andrewweigel.name\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "andrewweigel.name"] [uri "/"] [unique_id "aiB2C2X4b1f7bHB2HpT6pQAAAAo"], referer: http://andrewweigel.name/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-27 19:41:58 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 15:41:49.842583 2026] [security2:error] [pid 25355:tid 25355] [client 58.255.236.206:10394] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.flinthillsveterans.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.flinthillsveterans.org"] [uri "/"] [unique_id "ae-7_Via-eSy7qP40S_yngAAABM"], referer: http://www.flinthillsveterans.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-25 23:34:31 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 19:34:23.786511 2026] [security2:error] [pid 27287:tid 27287] [client 58.255.236.206:11529] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.wcvfr.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wcvfr.org"] [uri "/"] [unique_id "ae1Pf69M1SzfH1T9wX48ugAAACE"], referer: http://www.wcvfr.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-05 19:13:40 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 58.255.236.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 58.255.236.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 15:13:36.180427 2026] [security2:error] [pid 15268:tid 15268] [client 58.255.236.206:10537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.bhsp.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.bhsp.org"] [uri "/"] [unique_id "adK0YH35UPA_8hYow_Ub8QAAABY"], referer: http://www.bhsp.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-19 11:08:25 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 58.255.236.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 58.255.236.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 07:08:20.353904 2025] [security2:error] [pid 22224:tid 22224] [client 58.255.236.206:2718] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/6461/"] [unique_id "aM05pL0_U2EpEE5nym-VyQAAACA"], referer: https://www.renju.net/game/6461 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-08-17 23:55:16 (9 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/58.255.236.206 2025-08-17 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/58.255.236.206 2025-08-17 19:38:02 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-07-22 23:53:51 (10 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/58.255.236.206 2025-07-22 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/58.255.236.206 2025-07-22 06:57:09 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-04 00:03:07 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/58.255.236.206 2025-06-03 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/58.255.236.206 2025-06-03 03:17:03 /robots.txt show less	Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.107

🇳🇱 185.223.235.56

🇨🇳 129.211.172.249

🇩🇪 217.160.103.107

🇰🇷 175.119.225.68

🇨🇳 119.96.158.87

🇨🇳 111.44.137.199

🇳🇬 105.112.109.85

🇳🇱 45.156.87.253

🇺🇸 20.168.6.226

🇯🇵 152.32.202.250

🇭🇰 152.32.132.28

🇦🇺 118.210.138.171

🇧🇪 35.190.216.130

🇧🇪 34.156.175.68

🇧🇪 34.140.106.103

🇺🇸 2001:470:1:332::136

🇮🇩 103.122.67.223

🇰🇿 85.29.144.142

🇨🇳 58.243.126.29