JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.132.222.120

101.132.222.120 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 9%: ?

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.132.222.120

Whois 101.132.222.120

IP Abuse Reports for 101.132.222.120:

This IP address has been reported a total of 47 times from 15 distinct sources. 101.132.222.120 was first reported on January 10th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-22 16:20:51 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 12:20:43.688981 2026] [security2:error] [pid 28153:tid 28153] [client 101.132.222.120:54900] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thevillageartcenter.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thevillageartcenter.com"] [uri "/mailto:[email protected]"] [unique_id "ajlg24CW17Zw6ehdLxvnZgAAAAo"], referer: http://thevillageartcenter.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-02 14:06:56 (1 month ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇸🇬 pusathosting.com	2026-02-20 06:21:04 (4 months ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇵🇱 IROK	2026-02-04 08:44:18 (5 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
Anonymous	2026-01-31 18:10:17 (5 months ago)	Forum/form spam	Web Spam
🇱🇻 garmtech.com	2026-01-13 16:17:06 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-17.101.132.222.120.web-spam ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-17.101.132.222.120.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇸🇬 pusathosting.com	2026-01-11 18:00:06 (6 months ago)	2ds22 bruteforce	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-01-10 07:22:52 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 10 02:22:46.122406 2026] [security2:error] [pid 24042:tid 24042] [client 101.132.222.120:37490] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ik3co.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ik3co.com"] [uri "/mailto:[email protected]"] [unique_id "aWH-Rl-an9ckJSgbC1ALLgAAAAI"], referer: http://ik3co.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-09 19:01:14 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 09 14:01:09.675650 2026] [security2:error] [pid 26586:tid 26586] [client 101.132.222.120:36284] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thevillageartcenter.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thevillageartcenter.com"] [uri "/mailto:[email protected]"] [unique_id "aWFQddLz1SMtNBSLdQ8-wwAAAAg"], referer: http://thevillageartcenter.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-30 17:22:43 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 12:22:36.397660 2025] [security2:error] [pid 2502:tid 2502] [client 101.132.222.120:53256] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|puduspoems.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "puduspoems.com"] [uri "/web/20140107222105/http:/wwp.icq.com/scripts/WWPMsg.dll"] [unique_id "aVQKXDQu2sh-3-kfGoo3nwAAAAU"], referer: http://puduspoems.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-26 10:11:25 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 26 05:11:20.272328 2025] [security2:error] [pid 28779:tid 28779] [client 101.132.222.120:40594] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ronniescedarinn.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ronniescedarinn.com"] [uri "/mailto:[email protected]"] [unique_id "aU5fSNAlyvxGgEhpvEus3AAAAA8"], referer: http://ronniescedarinn.com/contact_us.htm show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-15 02:18:05 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 21:18:00.252503 2025] [security2:error] [pid 7819:tid 7819] [client 101.132.222.120:56108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|rcrgalicia.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rcrgalicia.com"] [uri "/mailto:[email protected]"] [unique_id "aT9v2NP2SFZPIyKltIiFCQAAACs"], referer: http://rcrgalicia.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 dankmemer3920	2025-12-10 17:47:11 (7 months ago)	CrowdSec: firehol_botscout_7d	Port Scan
Anonymous	2025-12-02 12:21:03 (7 months ago)	Bot / scanning and/or hacking attempts: GET /hello-world/ HTTP/1.0, GET /wp-login.php?action=registe ... show more Bot / scanning and/or hacking attempts: GET /hello-world/ HTTP/1.0, GET /wp-login.php?action=register HTTP/1.0 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-22 00:08:06 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 101.132.222.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 19:08:00.136477 2025] [security2:error] [pid 5541:tid 5541] [client 101.132.222.120:58584] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thevillageartcenter.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thevillageartcenter.com"] [uri "/mailto:[email protected]"] [unique_id "aSD-4MB2bEogb7kzElMJjgAAAAw"], referer: http://thevillageartcenter.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 222.127.54.18

🇧🇴 200.110.59.90

🇨🇦 134.122.46.206

🇷🇴 92.118.39.14

🇫🇷 85.204.70.90

🇳🇱 45.8.17.53

🇵🇭 154.18.197.35

🇷🇺 147.45.253.180

🇨🇳 113.0.152.164

🇲🇩 91.208.184.128

🇳🇱 45.148.10.152

🇨🇳 218.81.226.244

🇸🇻 179.5.179.95

🇺🇸 72.167.132.114

🇳🇱 45.198.224.145

🇳🇱 45.156.128.78

🇷🇴 2.57.121.112

🇺🇸 209.87.162.233

🇫🇷 185.177.72.58

🇧🇾 178.172.235.193