🇨🇳
ThreatBook.io
2025-09-06 22:56:12
(1 year ago)
ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/112.193.255.59
2025-0 ...
show more
ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/112.193.255.59
2025-09-06 11:05:42 /bin.rar
2025-09-06 11:10:58 /backup.rar
2025-09-06 11:05:22 /mujinning.gz
2025-09-06 11:10:36 /web001.rar
show less
Web App Attack
2025-06-28 04:26:08
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇯🇵
Kinsei Engineering Inc.
2024-10-30 07:57:30
(1 year ago)
Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.
Email Spam
Brute-Force
🇺🇸
TPI-Abuse
2024-10-08 15:16:53
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 11:15:17.654499 2024] [security2:error] [pid 21092:tid 21092] [client 112.193.255.59:62750] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bernarrmacfadden.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bernarrmacfadden.com"] [uri "/vb.bak"] [unique_id "ZwVMhb3gfaWU6p9Pk3DzXQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-06 22:52:02
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 18:51:12.009411 2024] [security2:error] [pid 30016:tid 30016] [client 112.193.255.59:63362] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.humbliaslaw.com|F|2"] [data ".0.0.1.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.humbliaslaw.com"] [uri "/127.0.0.1.sql"] [unique_id "ZwMUYPg5FiEzfhL1Jo3LRQAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-06 03:32:22
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 23:31:11.064091 2024] [security2:error] [pid 3655:tid 3655] [client 112.193.255.59:61896] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bigkevsperformance.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bigkevsperformance.com"] [uri "/php.sql"] [unique_id "ZwIEf7bNkAe-wlXj0UHMqQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-05 02:25:32
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 04 22:22:41.569206 2024] [security2:error] [pid 6933:tid 6933] [client 112.193.255.59:36034] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.wassusa.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wassusa.com"] [uri "/backups.bak"] [unique_id "ZwCi8VjX5Htw8epk8NbQiAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-04 20:16:40
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 04 16:15:42.681703 2024] [security2:error] [pid 31049:tid 31049] [client 112.193.255.59:35760] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kithouse.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kithouse.org"] [uri "/old.sql"] [unique_id "ZwBM7g2q9oGDP3yx8F9UxQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-10-04 12:15:53
(2 years ago)
DoS Attack
DDoS Attack
Brute-Force
🇺🇸
TPI-Abuse
2024-10-03 14:53:15
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 10:50:49.154097 2024] [security2:error] [pid 5379:tid 5379] [client 112.193.255.59:36165] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.paulburns.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.paulburns.com"] [uri "/paulburns.com.sql"] [unique_id "Zv6vSYmhyKA8NsrGz2Vw6gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 12:02:05
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 08:01:31.345877 2024] [security2:error] [pid 11810:tid 11810] [client 112.193.255.59:36141] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.stinsonbeachsurfandkayak.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stinsonbeachsurfandkayak.com"] [uri "/members.bak"] [unique_id "Zv6Hm09eSBm1e_LINPE7JAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 03:32:24
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 23:32:11.440326 2024] [security2:error] [pid 20315:tid 20315] [client 112.193.255.59:35945] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.sargentandco.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.sargentandco.com"] [uri "/2015.bak"] [unique_id "Zv4QO3D6JulpM_gkk64IwgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-02 23:51:57
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 19:51:02.012834 2024] [security2:error] [pid 22354:tid 22354] [client 112.193.255.59:35881] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bobbyunser.com|F|2"] [data ".bobbyunser.com.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bobbyunser.com"] [uri "/www.bobbyunser.com.bak"] [unique_id "Zv3cZiKlXPLPMw40g0gScAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-02 23:13:56
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 19:11:36.701797 2024] [security2:error] [pid 29629:tid 29629] [client 112.193.255.59:35616] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ussmauryags16.org|F|2"] [data ".ussmauryags16.org.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ussmauryags16.org"] [uri "/www.ussmauryags16.org.sql"] [unique_id "Zv3TKH7F_YpcPUqvjfyy0wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-02 12:56:21
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 08:54:48.480060 2024] [security2:error] [pid 24656:tid 24656] [client 112.193.255.59:36797] [client 112.193.255.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.adj-tech.net|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.adj-tech.net"] [uri "/2021.bak"] [unique_id "Zv1CmIbC3HITzLWPg2L7tQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack