JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 58.62.252.22

58.62.252.22 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 4%: ?

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 58.62.252.22

Whois 58.62.252.22

IP Abuse Reports for 58.62.252.22:

This IP address has been reported a total of 8 times from 6 distinct sources. 58.62.252.22 was first reported on December 3rd 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-24 19:30:05 (2 days ago)	(mod_security) mod_security (id:210831) triggered by 58.62.252.22 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 58.62.252.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 15:29:58.190966 2026] [security2:error] [pid 7806:tid 7806] [client 58.62.252.22:4529] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.wsffjatc.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wsffjatc.org"] [uri "/"] [unique_id "ajwwNsK_tNBdZcQjsXkc6gAAABA"], referer: http://www.wsffjatc.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 JCB	2024-12-04 09:18:00 (1 year ago)	spam	Email Spam
🇺🇸 JCB	2024-12-03 23:10:00 (1 year ago)	spam	Email Spam
🇸🇰 EVISION	2024-12-03 20:00:35 (1 year ago)	Automatic report from EV firewall log.	Port Scan Hacking Brute-Force
🇷🇴 INTEQ	2024-12-03 18:36:06 (1 year ago)	SMTP without rDNS from 58.62.252.22	Spoofing
🇸🇮 dsmidge	2024-12-03 17:04:07 (1 year ago)	Dec 3 18:04:06 server postfix/smtpd[474987]: connect from unknown[58.62.252.22] Dec 3 18:04:07 ser ... show more Dec 3 18:04:06 server postfix/smtpd[474987]: connect from unknown[58.62.252.22] Dec 3 18:04:07 server postfix/smtpd[474987]: NOQUEUE: reject: RCPT from unknown[58.62.252.22]: 554 5.7.1 Service unavailable; Client host [58.62.252.22] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/58.62.252.22 / Listed by PBL, see https://check.spamhaus.org/query/ip/58.62.252.22 / Listed by XBL, see https://check.spamhaus.org/query/ip/58.62.252.22; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<smtp.aircom.com.my> ... show less	Email Spam
🇺🇸 JCB	2024-12-03 15:20:00 (1 year ago)	spam	Email Spam
Anonymous	2024-12-03 13:31:29 (1 year ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.72.138.160

🇩🇪 212.227.68.87

🇷🇺 158.58.133.185

🇳🇱 155.254.42.187

🇪🇸 80.36.144.50

🇧🇬 79.124.58.218

🇺🇸 66.132.186.240

🇹🇷 37.202.54.133

🇳🇱 185.226.197.12

🇺🇸 147.185.132.89

🇮🇳 143.110.251.21

🇺🇸 141.11.88.9

🇩🇪 136.243.220.212

🇨🇳 106.37.72.234

🇳🇱 91.92.40.124

🇳🇱 45.148.10.151

🇩🇪 213.209.159.225

🇧🇷 138.84.59.198

🇮🇳 49.47.216.186

🇳🇱 45.156.128.151