JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.193.255.15

112.193.255.15 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 0%: ?

ISP	China Unicom Sichuan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.193.255.15

Whois 112.193.255.15

IP Abuse Reports for 112.193.255.15:

This IP address has been reported a total of 34 times from 20 distinct sources. 112.193.255.15 was first reported on May 16th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2024-12-06 16:12:27 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇮🇩 hermawan	2024-11-05 19:49:20 (1 year ago)	[Mon Nov 04 23:53:39.873292 2024] [security2:error] [pid 1579647:tid 124490671457984] [client 112.19 ... show more [Mon Nov 04 23:53:39.873292 2024] [security2:error] [pid 1579647:tid 124490671457984] [client 112.193.255.15:45275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.7.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "62"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: zh,zh-CN;q=0.9 request_line = GET /index.php/prakiraan-bulanan/3876-prakiraan-potensi-banjir/prakiraan-potensi-banjir-di-propinsi-jawa-timur/prakiraan-daerah-potensi-banjir-provinsi-jawa-timur-tahun-2018/579-prakiraan-bulanan-daerah-potensi-banjir-di-provinsi-jawa-timur-bulan-januari-tahun-2019-update-10-desember-2018 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-bulanan/3876-prakiraan-potensi-banjir/prakiraan-potensi-banjir-di-propinsi-jawa-timur/prakiraan-daerah-potensi- ... show less	Hacking Web App Attack
🇺🇸 rdpguard.com	2024-10-21 00:22:24 (1 year ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
Anonymous	2024-10-20 10:30:21 (1 year ago)	\| Suspicious URL access.	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2024-10-09 03:03:08 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 23:03:01.851177 2024] [security2:error] [pid 5799:tid 5799] [client 112.193.255.15:27826] [client 112.193.255.15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.zacharyschwartzman.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.zacharyschwartzman.com"] [uri "/2013.bak"] [unique_id "ZwXyZcczjz7DQs5fTsNmMQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-08 16:38:08 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 12:36:56.853369 2024] [security2:error] [pid 22329:tid 22329] [client 112.193.255.15:27196] [client 112.193.255.15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.callbobh.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.callbobh.com"] [uri "/clients.bak"] [unique_id "ZwVfqH09Z8TrLIvgvcTTtQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-08 15:16:41 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 11:15:09.643916 2024] [security2:error] [pid 19869:tid 19869] [client 112.193.255.15:28081] [client 112.193.255.15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bernarrmacfadden.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bernarrmacfadden.com"] [uri "/2011.bak"] [unique_id "ZwVMfRHp4c8vKtnImM4wuwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2024-10-08 10:36:05 (2 years ago)	DoS Attack	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2024-10-08 08:10:53 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 04:10:45.225233 2024] [security2:error] [pid 30295:tid 30295] [client 112.193.255.15:28101] [client 112.193.255.15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.commonthreadsvt.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.commonthreadsvt.org"] [uri "/2013.sql"] [unique_id "ZwTpBdsri8yvzNdzAPrX6AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-08 02:40:24 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 22:39:53.516027 2024] [security2:error] [pid 32054:tid 32054] [client 112.193.255.15:28325] [client 112.193.255.15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.marilynmonroebookstore.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.marilynmonroebookstore.com"] [uri "/database.bak"] [unique_id "ZwSbeaZvEZAoZTwOaCbYRgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-07 07:51:15 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 03:49:22.529220 2024] [security2:error] [pid 26939:tid 26939] [client 112.193.255.15:27984] [client 112.193.255.15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.valkyriepanthers.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.valkyriepanthers.com"] [uri "/wordpress.sql"] [unique_id "ZwOSgkHLcEJv5TjOoQswTgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-07 05:42:04 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 01:40:02.458784 2024] [security2:error] [pid 30512:tid 30512] [client 112.193.255.15:28016] [client 112.193.255.15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.med-engineering.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/error_log.bak"] [unique_id "ZwN0MoMmOg8c6VyRU86PdAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-06 22:52:18 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 18:51:12.248696 2024] [security2:error] [pid 30280:tid 30280] [client 112.193.255.15:27806] [client 112.193.255.15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.humbliaslaw.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.humbliaslaw.com"] [uri "/aspx.bak"] [unique_id "ZwMUYHDxBGBP-c6LrDnkkgAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-06 17:39:40 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 13:37:19.351596 2024] [security2:error] [pid 16396:tid 16396] [client 112.193.255.15:27728] [client 112.193.255.15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.naplesdogcenter.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.naplesdogcenter.com"] [uri "/members.sql"] [unique_id "ZwLKz7SwJ5oYsdnT8OQuQwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-03 13:10:06 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 190.233.137.32

🇮🇳 82.180.147.135

🇺🇸 2a10:3c0:5:1:1:10:0:5

🇨🇳 120.238.23.168

🇪🇬 41.35.240.58

🇨🇳 14.121.242.179

🇧🇷 2804:28c8:209c:7600:2107:dbb2:d48f:d8b1

🇮🇩 202.51.214.98

🇺🇸 147.185.132.73

🇭🇰 43.240.14.35

🇺🇸 23.94.189.114

🇬🇧 206.189.25.140

🇬🇧 200.138.46.176

🇧🇷 191.251.11.18

🇺🇸 66.132.195.51

🇱🇹 62.60.130.253

🇺🇸 47.251.33.148

🇧🇪 34.62.82.165

🇨🇳 203.176.95.143

🇹🇼 114.26.85.65