JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.29.78.132

120.29.78.132 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 92%: ?

92%

ISP	ComClark Network & Technology Corp
Usage Type	Fixed Line ISP
ASN	AS17639
Hostname(s)	132.78.29.120-rev.convergeict.com
Domain Name	comclark.com
Country	🇵🇭 Philippines
City	San Jose del Monte, Central Luzon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.29.78.132

Whois 120.29.78.132

IP Abuse Reports for 120.29.78.132:

This IP address has been reported a total of 47 times from 20 distinct sources. 120.29.78.132 was first reported on April 11th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-07-25 10:55:26 (1 day ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
Anonymous	2026-07-25 04:06:02 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 jsjdmediallc	2026-07-24 07:20:04 (2 days ago)	Auto-blocked: score 496 (threshold 10). Tier: HIGH. Hits: 98. Flags: xmlrpc, xmlrpc-burst, single-pa ... show more Auto-blocked: score 496 (threshold 10). Tier: HIGH. Hits: 98. Flags: xmlrpc, xmlrpc-burst, single-path-flood. Paths: /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php show less	Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-24 07:02:42 (2 days ago)	(xmlrpc) Failed xmlrpc access from 120.29.78.132 (PH/Philippines/132.78.29.120-rev.convergeict.com): ... show more (xmlrpc) Failed xmlrpc access from 120.29.78.132 (PH/Philippines/132.78.29.120-rev.convergeict.com): 5 in the last 3600 secs (0-122) show less	Hacking
🇳🇱 ConsulHosting	2026-07-24 05:39:46 (2 days ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 03:21:00 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.co ... show more (mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 23:20:53.432347 2026] [security2:error] [pid 3070298:tid 3070298] [client 120.29.78.132:26401] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.78.132 (+1 hits since last alert)\|innolympics.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "innolympics.com"] [uri "/xmlrpc.php"] [unique_id "amLaFZajLLR4khGj-96naQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 15:24:56 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.co ... show more (mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 11:24:51.434323 2026] [security2:error] [pid 2432962:tid 2432962] [client 120.29.78.132:23796] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.78.132 (+1 hits since last alert)\|robotsinme.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "robotsinme.org"] [uri "/xmlrpc.php"] [unique_id "amIyQ0ZunfJDkxOTTjKDYQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 05:38:26 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.co ... show more (mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:38:22.042952 2026] [security2:error] [pid 2237224:tid 2237224] [client 120.29.78.132:2241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.78.132 (+1 hits since last alert)\|vanmeer.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vanmeer.info"] [uri "/xmlrpc.php"] [unique_id "amGozujT3w_GwX6jtqal3QAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 15:54:12 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.co ... show more (mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 11:54:03.553419 2026] [security2:error] [pid 1005458:tid 1005458] [client 120.29.78.132:33989] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.78.132 (+1 hits since last alert)\|pharmaceuticalsalescareerhub.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pharmaceuticalsalescareerhub.com"] [uri "/xmlrpc.php"] [unique_id "amDnm7HWrqN4V-1XI_vqmwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-22 07:55:50 (4 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-22 06:04:16 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.co ... show more (mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 02:04:08.834077 2026] [security2:error] [pid 944227:tid 944227] [client 120.29.78.132:1370] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.78.132 (+1 hits since last alert)\|webersource.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "webersource.com"] [uri "/xmlrpc.php"] [unique_id "amBdWPqs2BqC1FMMxPHWnwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-22 06:02:00 (4 days ago)	(wordpress) Failed wordpress login from 120.29.78.132 (PH/Philippines/132.78.29.120-rev.convergeict. ... show more (wordpress) Failed wordpress login from 120.29.78.132 (PH/Philippines/132.78.29.120-rev.convergeict.com) show less	Brute-Force
🇪🇸 alferez	2026-07-22 04:31:12 (4 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
Anonymous	2026-07-21 08:52:53 (5 days ago)	[redacted] 120.29.78.132 - - [21/Jul/2026:10:52:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "J ... show more [redacted] 120.29.78.132 - - [21/Jul/2026:10:52:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" [redacted] 120.29.78.132 - - [21/Jul/2026:10:52:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" [redacted] 120.29.78.132 - - [21/Jul/2026:10:52:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" [redacted] 120.29.78.132 - - [21/Jul/2026:10:52:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" [redacted] 120.29.78.132 - - [21/Jul/2026:10:52:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/13.0; WordPress/6.4; http://site92525918.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 06:40:49 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.co ... show more (mod_security) mod_security (id:240335) triggered by 120.29.78.132 (132.78.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 02:40:43.823809 2026] [security2:error] [pid 28974:tid 28974] [client 120.29.78.132:54336] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.78.132 (+1 hits since last alert)\|microbooty.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "microbooty.com"] [uri "/xmlrpc.php"] [unique_id "al8Ua16eqgqNxdjcMeRH2gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.175.208.50

🇩🇪 213.209.159.235

🇬🇧 193.163.125.37

🇫🇷 176.187.39.40

🇺🇸 172.71.190.47

🇺🇸 172.71.190.46

🇫🇮 35.228.6.219

🇳🇱 192.42.116.51

🇧🇷 186.216.88.66

🇨🇳 124.220.205.226

🇦🇺 114.30.104.218

🇰🇷 59.27.249.238

🇲🇾 49.125.201.83

🇻🇳 45.117.177.47

🇻🇪 38.74.245.242

🇺🇸 216.226.77.20

🇺🇸 143.198.150.150

🇨🇳 106.75.169.157

🇸🇬 47.79.11.28

🇨🇦 4.204.201.85