JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.193.255.18

112.193.255.18 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 0%: ?

ISP	China Unicom Sichuan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.193.255.18

Whois 112.193.255.18

IP Abuse Reports for 112.193.255.18:

This IP address has been reported a total of 29 times from 12 distinct sources. 112.193.255.18 was first reported on May 23rd 2024, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2024-10-17 12:03:51 (2 years ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 TPI-Abuse	2024-10-09 03:04:13 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 23:03:03.675345 2024] [security2:error] [pid 4903:tid 4903] [client 112.193.255.18:41161] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.zacharyschwartzman.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.zacharyschwartzman.com"] [uri "/2014.bak"] [unique_id "ZwXyZzAHYQ5WwU-B9hntowAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-07 00:21:28 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 20:19:43.569912 2024] [security2:error] [pid 29291:tid 29351] [client 112.193.255.18:41772] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.super-8mm.net\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.super-8mm.net"] [uri "/old.bak"] [unique_id "ZwMpH9q-1FyOSfdAOz39fAAAAYM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-06 03:32:28 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 23:31:01.080194 2024] [security2:error] [pid 31677:tid 31677] [client 112.193.255.18:41884] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bigkevsperformance.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bigkevsperformance.com"] [uri "/2016.sql"] [unique_id "ZwIEdTZLAN4eHIyeQEK3wwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-05 08:21:10 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 04:19:07.489820 2024] [security2:error] [pid 18041:tid 18041] [client 112.193.255.18:57336] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.mosherpit.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mosherpit.com"] [uri "/website.sql"] [unique_id "ZwD2e_EgROLCzG7Bih1QEAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-05 02:24:18 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 04 22:22:43.597674 2024] [security2:error] [pid 7049:tid 7049] [client 112.193.255.18:56952] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.wassusa.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wassusa.com"] [uri "/bin.bak"] [unique_id "ZwCi89FmKLraghZMrCX5agAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-03 14:52:15 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 10:50:43.395017 2024] [security2:error] [pid 7252:tid 7252] [client 112.193.255.18:55616] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.paulburns.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.paulburns.com"] [uri "/joomla.sql"] [unique_id "Zv6vQ4XbdH5foyGw1zyVVgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-03 00:03:52 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 20:01:34.786247 2024] [security2:error] [pid 30056:tid 30056] [client 112.193.255.18:56004] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.passwordresearch.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.passwordresearch.com"] [uri "/clients.sql"] [unique_id "Zv3e3upfN2cKuEcLlbIDCgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-02 23:13:02 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 19:11:31.145404 2024] [security2:error] [pid 29657:tid 29657] [client 112.193.255.18:56482] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ussmauryags16.org\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ussmauryags16.org"] [uri "/2017.bak"] [unique_id "Zv3TI3FEl4LXIrawYMNHNgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-02 12:56:53 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 08:54:51.399890 2024] [security2:error] [pid 25048:tid 25048] [client 112.193.255.18:56146] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.adj-tech.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.adj-tech.net"] [uri "/backup.sql"] [unique_id "Zv1Cm2oaoKUixZdSkiDUSAAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-04 08:16:01 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 04 04:14:51.925409 2024] [security2:error] [pid 17054:tid 17054] [client 112.193.255.18:41820] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.affordable247school.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.affordable247school.com"] [uri "/files.bak"] [unique_id "ZtgW-yXPedvt8UQNmWzaxgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-04 01:40:04 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 21:37:20.784264 2024] [security2:error] [pid 3389:tid 3389] [client 112.193.255.18:41293] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pharmasalesconnect.com\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pharmasalesconnect.com"] [uri "/pharmasalesconnectcom.backup"] [unique_id "Zte50CKzc-0lCeankreqcQAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-03 13:12:41 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 09:12:36.079869 2024] [security2:error] [pid 16085:tid 16085] [client 112.193.255.18:43002] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.artspacecleveland.org\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.artspacecleveland.org"] [uri "/2012.bak"] [unique_id "ZtcLROtRoM5b4KPK1ItgKAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-03 12:04:00 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 08:02:45.083959 2024] [security2:error] [pid 1147015:tid 1147015] [client 112.193.255.18:42957] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.petiteplaisanceconservationfund.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.petiteplaisanceconservationfund.org"] [uri "/test.sql"] [unique_id "Ztb65QhUxZq7n6uOCmMHsgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-03 09:40:01 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 05:39:53.610622 2024] [security2:error] [pid 11904:tid 11904] [client 112.193.255.18:41178] [client 112.193.255.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.oiseauxsisters.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.oiseauxsisters.com"] [uri "/2022.sql"] [unique_id "ZtbZaS8c5zoMRl6x3-4JggAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 179.43.167.3

🇺🇸 107.0.200.227

🇫🇷 185.234.69.227

🇺🇸 185.180.141.12

🇧🇷 168.0.154.57

🇳🇱 158.94.209.93

🇮🇩 36.64.131.68

🇺🇸 20.169.84.213

🇷🇺 213.234.8.114

🇬🇧 194.50.235.144

🇰🇷 112.163.135.25

🇻🇳 103.172.236.15

🇫🇷 86.204.196.176

🇺🇸 73.46.97.22

🇳🇱 45.148.10.151

🇭🇰 216.118.231.170

🇦🇷 186.122.177.140

🇧🇬 145.255.196.49

🇹🇼 116.59.10.150

🇱🇹 77.90.185.20