JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 58.255.237.16

58.255.237.16 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 5%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 58.255.237.16

Whois 58.255.237.16

IP Abuse Reports for 58.255.237.16:

This IP address has been reported a total of 6 times from 2 distinct sources. 58.255.237.16 was first reported on August 29th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 20:32:08 (13 hours ago)	(mod_security) mod_security (id:210831) triggered by 58.255.237.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 58.255.237.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:32:01.371012 2026] [security2:error] [pid 32012:tid 32012] [client 58.255.237.16:16141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.breezentry.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.breezentry.com"] [uri "/"] [unique_id "akgcQbBD5NJ8gImwMi1QVwAAAAc"], referer: http://www.breezentry.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 14:54:47 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 58.255.237.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 58.255.237.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 10:54:39.657182 2026] [security2:error] [pid 12034:tid 12034] [client 58.255.237.16:15888] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.swindon-itf.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.swindon-itf.com"] [uri "/"] [unique_id "akZ7r5SQzspCyVUIlyb6qgAAAAk"], referer: http://www.swindon-itf.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 12:16:39 (3 days ago)	(mod_security) mod_security (id:210831) triggered by 58.255.237.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 58.255.237.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 08:16:30.148795 2026] [security2:error] [pid 16246:tid 16246] [client 58.255.237.16:7306] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.grandvistalabs.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.grandvistalabs.com"] [uri "/"] [unique_id "akOznqqPvl89zRL9yJL43QAAAAg"], referer: http://www.grandvistalabs.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 20:21:10 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 58.255.237.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 58.255.237.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 15:21:04.751137 2026] [security2:error] [pid 27503:tid 27503] [client 58.255.237.16:5297] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.omnitractors.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.omnitractors.com"] [uri "/index.html"] [unique_id "aZ4IMHNTBgPOmUOTiNF94QAAAA4"], referer: http://www.omnitractors.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-09-07 00:16:13 (9 months ago)	ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/58.255.237.16 2025- ... show more ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/58.255.237.16 2025-09-06 12:30:59 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-08-29 00:28:46 (10 months ago)	ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/58.255.237.16 2025- ... show more ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/58.255.237.16 2025-08-28 07:45:42 /config.json show less	Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 219.159.229.61

🇫🇮 147.185.133.149

🇮🇳 103.149.197.34

🇵🇰 103.73.102.5

🇻🇳 103.20.97.75

🇧🇪 87.64.231.172

🇺🇸 74.235.121.66

🇰🇷 45.94.68.69

🇺🇸 20.65.195.16

🇵🇭 203.177.197.190

🇲🇾 175.141.179.75

🇺🇸 173.255.226.210

🇻🇳 171.231.195.7

🇺🇸 159.223.167.83

🇷🇴 80.94.92.55

🇩🇪 64.226.69.88

🇮🇳 52.172.248.15

🇺🇸 40.77.167.144

🇨🇭 209.99.190.113

🇩🇪 194.187.176.160