JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

112.193.255.67

Neutral Activity

Abuse confidence score ?

0% Low Risk

36 reports

13 reporters · latest 1 year ago

ISP	China Unicom Sichuan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

112.193.255.67 has been reported 36 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 112.193.255.67

Export CSV

This IP address has been reported a total of 36 times from 13 distinct sources. 112.193.255.67 was first reported on April 30th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-20 01:52:20 (1 year ago)	(mod_security) mod_security (id:210350) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 21:52:09.877931 2025] [security2:error] [pid 4949:tid 4949] [client 112.193.255.67:43623] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "renju.net"] [uri "/tournament/602/game/13028/"] [unique_id "aM4IyY7bDsDMNk09hREj3QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-11 21:38:56 (1 year ago)	(mod_security) mod_security (id:210350) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 17:38:49.851534 2025] [security2:error] [pid 30783:tid 30783] [client 112.193.255.67:4227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/2352/game/94554/"] [unique_id "aMNBaSHXf4Ne6VEHc9bVZAAAABA"], referer: https://www.renju.net/tournament/2352/game/94554 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-09-06 22:56:05 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/112.193.255.67 2025-09-06 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/112.193.255.67 2025-09-06 11:12:37 /src.zip 2025-09-06 11:21:25 /mujinningcn.sql 2025-09-06 11:05:17 /dotnet.rar 2025-09-06 11:18:28 /mujinning_cn.rar show less	Web App Attack
🇯🇵 Kinsei Engineering Inc.	2024-10-07 09:47:04 (2 years ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Email Spam Brute-Force
🇺🇸 TPI-Abuse	2024-10-05 20:13:38 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 16:13:05.221484 2024] [security2:error] [pid 11988:tid 11988] [client 112.193.255.67:40804] [client 112.193.255.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.taskmasterstech.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.taskmasterstech.com"] [uri "/backups.sql"] [unique_id "ZwGd0Yf3mcWDJHD28nLudAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-05 02:24:05 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 04 22:22:42.345613 2024] [security2:error] [pid 20535:tid 20535] [client 112.193.255.67:40269] [client 112.193.255.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.wassusa.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wassusa.com"] [uri "/joomla.bak"] [unique_id "ZwCi8r6Iqqk-cN9n0XbKPQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-02 06:16:42 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 02:16:14.701257 2024] [security2:error] [pid 10022:tid 10022] [client 112.193.255.67:39542] [client 112.193.255.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.valuechains4poor.net\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.valuechains4poor.net"] [uri "/forum.bak"] [unique_id "ZvzlLspZJaHz2Ul9i01fngAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-01 21:11:42 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 01 17:09:16.897514 2024] [security2:error] [pid 20363:tid 20363] [client 112.193.255.67:39160] [client 112.193.255.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.femalegamblers.org\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.femalegamblers.org"] [uri "/localhost.bak"] [unique_id "Zvxk_MYKS0Z6tdD4ON-dhgAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-10 01:25:42 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 21:25:07.118591 2024] [security2:error] [pid 12864:tid 12864] [client 112.193.255.67:62636] [client 112.193.255.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.twobytwotutoring.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.twobytwotutoring.org"] [uri "/root.sql"] [unique_id "Zt-f8xriVW53_wAZ0nxL-wAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2024-09-08 19:54:42 (2 years ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-09-08 12:46:04 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 08 08:44:30.379171 2024] [security2:error] [pid 1599:tid 1599] [client 112.193.255.67:44492] [client 112.193.255.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.trailofcrumbs.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.trailofcrumbs.com"] [uri "/media.sql"] [unique_id "Zt2cLhYv4q0CorZ2cXQ2BwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-08 07:24:52 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 08 03:23:01.481195 2024] [security2:error] [pid 31759:tid 31759] [client 112.193.255.67:43398] [client 112.193.255.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.carmichaellaw.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.carmichaellaw.org"] [uri "/wwwroot.sql"] [unique_id "Zt1Q1SM4gF-Ime5OTC547wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-07 11:59:39 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 07 07:58:21.578942 2024] [security2:error] [pid 11593:tid 11593] [client 112.193.255.67:62630] [client 112.193.255.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.stenbot.com\|F\|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stenbot.com"] [uri "/stenbot.com.sql"] [unique_id "Ztw_3RB9z7iJla1KVzIlvQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-07 05:36:46 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 07 01:34:20.356699 2024] [security2:error] [pid 31940:tid 31940] [client 112.193.255.67:44295] [client 112.193.255.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.wplusw.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wplusw.com"] [uri "/clients.bak"] [unique_id "Ztvl3FyxY7GgL83r0-x0LAAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-06 18:01:53 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 112.193.255.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 06 14:01:10.530274 2024] [security2:error] [pid 26993:tid 26993] [client 112.193.255.67:43715] [client 112.193.255.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.mordesign1.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mordesign1.com"] [uri "/users.bak"] [unique_id "ZttDZkw6amBcY0KGtjNm4wAAABU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.149

🇲🇽 189.243.209.147

🇰🇷 218.235.37.18

🇳🇱 193.176.31.250

🇩🇪 185.193.167.2

🇹🇭 124.156.246.92

🇨🇳 114.220.238.21

🇳🇱 109.160.32.144

🇨🇳 101.67.138.69

🇫🇷 91.196.152.221

🇳🇱 89.21.67.178

🇨🇦 85.217.149.60

🇮🇩 69.5.21.196

🇸🇨 46.151.182.127

🇬🇧 45.82.76.114

🇨🇴 38.225.62.2

🇺🇸 3.131.24.55

🇨🇳 221.198.80.63

🇫🇷 185.177.72.70

🇨🇳 175.173.84.216