๐บ๐ธ
TPI-Abuse
2025-09-21 12:46:16
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 08:46:11.184001 2025] [security2:error] [pid 3876:tid 3876] [client 112.193.255.55:16354] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/115291/"] [unique_id "aM_zkw7s5hREqTxNPoLfvQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ณ
ThreatBook.io
2025-09-06 22:56:13
(1 year ago)
ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/112.193.255.55
2025-09-06 11 ...
show more
ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/112.193.255.55
2025-09-06 11:17:01 /net.zip
2025-09-06 11:05:51 /java.tar
2025-09-06 11:10:33 /build.tar
2025-09-06 11:05:30 /bak.rar
2025-09-06 11:15:37 /mwebmujinningcn.sql.gz
show less
Web App Attack
๐บ๐ธ
rdpguard.com
2024-10-21 00:22:44
(1 year ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐บ๐ธ
TPI-Abuse
2024-10-09 03:03:37
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 23:03:07.404785 2024] [security2:error] [pid 6731:tid 6731] [client 112.193.255.55:59896] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.zacharyschwartzman.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.zacharyschwartzman.com"] [uri "/store.bak"] [unique_id "ZwXya-QhHTbif7BMFCHhHAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-08 13:07:55
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 09:07:45.248099 2024] [security2:error] [pid 2423:tid 2423] [client 112.193.255.55:59770] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mutualdrivingschool.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mutualdrivingschool.com"] [uri "/files.bak"] [unique_id "ZwUuoan-T-SYgSWyzL1KbQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-07 05:42:25
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 01:40:01.419940 2024] [security2:error] [pid 30484:tid 30484] [client 112.193.255.55:59749] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.med-engineering.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/files.sql"] [unique_id "ZwN0MRh_nAkefY6LAN4ZhwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-07 04:23:07
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 00:21:47.614514 2024] [security2:error] [pid 30099:tid 30099] [client 112.193.255.55:59799] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.tlphotogifts.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.tlphotogifts.com"] [uri "/2015.sql"] [unique_id "ZwNh2yl3SffpUprMCnZaegAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-07 00:20:48
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 20:19:48.963374 2024] [security2:error] [pid 29227:tid 29249] [client 112.193.255.55:61020] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.super-8mm.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.super-8mm.net"] [uri "/www_super-8mm_net.sql"] [unique_id "ZwMpJD3S2GoZ8lHu8YVdUQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-06 17:39:35
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 13:37:19.121369 2024] [security2:error] [pid 15682:tid 15682] [client 112.193.255.55:61270] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.naplesdogcenter.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.naplesdogcenter.com"] [uri "/master.bak"] [unique_id "ZwLKzwwGVhtbd_kuq8estwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-05 20:13:47
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 16:13:04.724578 2024] [security2:error] [pid 7910:tid 7910] [client 112.193.255.55:60491] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.taskmasterstech.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.taskmasterstech.com"] [uri "/asp.sql"] [unique_id "ZwGd0H8vYpDeEROzZEdQqQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
10dencehispahard SL
2024-10-04 12:15:26
(2 years ago)
DoS Attack
DDoS Attack
Brute-Force
๐บ๐ธ
TPI-Abuse
2024-10-04 00:11:31
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 20:10:14.787100 2024] [security2:error] [pid 22537:tid 22537] [client 112.193.255.55:59743] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hondaekamotor.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hondaekamotor.com"] [uri "/index.bak"] [unique_id "Zv8yZtOU0wmi0MUrpxvShgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-02 23:13:39
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 19:11:36.684808 2024] [security2:error] [pid 29658:tid 29658] [client 112.193.255.55:60744] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ussmauryags16.org|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ussmauryags16.org"] [uri "/www_ussmauryags16_org.bak"] [unique_id "Zv3TKFY99CnGJwLDDx1ufgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-02 06:16:50
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 02:16:15.487310 2024] [security2:error] [pid 8530:tid 8530] [client 112.193.255.55:60009] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.valuechains4poor.net|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.valuechains4poor.net"] [uri "/members.bak"] [unique_id "ZvzlL6Newc8-qopobis7FgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-01 21:10:26
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 01 17:09:16.013608 2024] [security2:error] [pid 20177:tid 20177] [client 112.193.255.55:59966] [client 112.193.255.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.femalegamblers.org|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.femalegamblers.org"] [uri "/dump.bak"] [unique_id "Zvxk_PJqIrWWBgwrkOJ03wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack