JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

112.193.255.14

Neutral Activity

Abuse confidence score ?

0% Low Risk

32 reports

13 reporters · latest 1 year ago

ISP	China Unicom Sichuan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

112.193.255.14 has been reported 32 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 112.193.255.14

Export CSV

This IP address has been reported a total of 32 times from 13 distinct sources. 112.193.255.14 was first reported on May 27th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 marzzzello	2025-07-27 01:27:44 (1 year ago)	Ports: 20x 38953	Port Scan
🇮🇪 Jim Keir	2025-07-01 16:26:48 (1 year ago)	2025-07-01 16:26:48 112.193.255.14 File scanning, blocking 112.193.255.14 for 5 minutes	Web App Attack
🇺🇸 TPI-Abuse	2024-10-08 21:24:01 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 17:23:45.320189 2024] [security2:error] [pid 20717:tid 20717] [client 112.193.255.14:60814] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.realestateinpalmbeachflorida.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.realestateinpalmbeachflorida.com"] [uri "/1.bak"] [unique_id "ZwWi4Yu7PG8eLkprr3cBcwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-08 13:07:52 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 09:07:44.772449 2024] [security2:error] [pid 2842:tid 2842] [client 112.193.255.14:61375] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.mutualdrivingschool.com\|F\|2"] [data ".0.0.1.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mutualdrivingschool.com"] [uri "/127.0.0.1.sql"] [unique_id "ZwUuoGr5TnGsyqe3D7ZmTgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-08 11:07:09 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 07:06:27.678445 2024] [security2:error] [pid 459:tid 459] [client 112.193.255.14:61358] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.alessiosilvestrin.com\|F\|2"] [data ".com.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.alessiosilvestrin.com"] [uri "/alessiosilvestrin.com.backup"] [unique_id "ZwUSM8KD7w-eSKh2af8g8AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2024-10-08 10:36:01 (2 years ago)	DoS Attack	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2024-10-06 17:38:42 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 13:37:22.418721 2024] [security2:error] [pid 16378:tid 16378] [client 112.193.255.14:60056] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.naplesdogcenter.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.naplesdogcenter.com"] [uri "/log.sql"] [unique_id "ZwLK0jzS7aWTUVhwp-L4UwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-05 06:13:15 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 05 02:11:32.454442 2024] [security2:error] [pid 14086:tid 14086] [client 112.193.255.14:28045] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.tvsmainstreetnetwork.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.tvsmainstreetnetwork.com"] [uri "/db.sql"] [unique_id "ZtlLlAi3tGxa7RNSniUcngAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-05 04:28:17 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 05 00:26:55.394179 2024] [security2:error] [pid 12258:tid 12258] [client 112.193.255.14:28022] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.instepdogobedience.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.instepdogobedience.com"] [uri "/archive.bak"] [unique_id "ZtkzD12p-fcCcm45qR7iOAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-04 01:39:04 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 21:37:16.305526 2024] [security2:error] [pid 3367:tid 3367] [client 112.193.255.14:28008] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pharmasalesconnect.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pharmasalesconnect.com"] [uri "/clients.bak"] [unique_id "Zte5zLmET_bg8Did-e977AAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-03 13:12:40 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 09:12:36.079649 2024] [security2:error] [pid 16080:tid 16080] [client 112.193.255.14:28539] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.artspacecleveland.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.artspacecleveland.org"] [uri "/2011.sql"] [unique_id "ZtcLRK3VJFCuKHshiaQa5QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-03 12:03:03 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 08:02:37.510673 2024] [security2:error] [pid 1146549:tid 1146549] [client 112.193.255.14:28142] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.petiteplaisanceconservationfund.org\|F\|2"] [data ".0.0.1.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.petiteplaisanceconservationfund.org"] [uri "/127.0.0.1.sql"] [unique_id "Ztb63VZea0rxHqRfRCLuXwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-01 18:14:42 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 14:12:07.467783 2024] [security2:error] [pid 28472:tid 28472] [client 112.193.255.14:18974] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.highaltitudebaking.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.highaltitudebaking.com"] [uri "/www_highaltitudebaking_com.sql"] [unique_id "ZtSud2MmPa4CU1jZ4GRYbQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-01 12:49:16 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 08:47:01.438113 2024] [security2:error] [pid 17832:tid 17832] [client 112.193.255.14:27165] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.tanny.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.tanny.com"] [uri "/store.bak"] [unique_id "ZtRiRerZpX-f4qiaZS7kAwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-01 09:09:03 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 05:08:46.379932 2024] [security2:error] [pid 4228:tid 4228] [client 112.193.255.14:26788] [client 112.193.255.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.wincourtransportation.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wincourtransportation.com"] [uri "/2019.sql"] [unique_id "ZtQvHl-BL-f01dEEP2FwxwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.227

🇺🇸 162.158.42.45

🇹🇷 168.235.196.32

🇩🇪 163.171.242.126

🇩🇪 138.246.253.24

🇳🇱 104.23.170.141

🇫🇷 45.134.79.162

🇦🇺 209.38.30.73

🇳🇱 164.90.193.147

🇺🇸 147.185.132.245

🇮🇳 111.92.83.7

🇮🇳 66.116.207.168

🇺🇸 205.210.31.73

🇺🇸 195.184.76.196

🇮🇹 195.32.2.175

🇮🇳 163.223.244.3

🇺🇸 104.207.36.212

🇩🇪 213.209.159.11

🇩🇪 172.120.89.117

🇺🇸 164.92.112.151