JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.29.87.12

120.29.87.12 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 38%: ?

38%

ISP	ComClark Network & Technology Corp
Usage Type	Fixed Line ISP
ASN	AS17639
Hostname(s)	12.87.29.120-rev.convergeict.com
Domain Name	comclark.com
Country	🇵🇭 Philippines
City	San Jose del Monte, Central Luzon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.29.87.12

Whois 120.29.87.12

IP Abuse Reports for 120.29.87.12:

This IP address has been reported a total of 27 times from 19 distinct sources. 120.29.87.12 was first reported on November 18th 2021, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-16 18:23:57 (11 hours ago)	(mod_security) mod_security (id:240335) triggered by 120.29.87.12 (12.87.29.120-rev.convergeict.com) ... show more (mod_security) mod_security (id:240335) triggered by 120.29.87.12 (12.87.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 14:23:51.835820 2026] [security2:error] [pid 6597:tid 6602] [client 120.29.87.12:18276] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.87.12 (+1 hits since last alert)\|almerirock.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "almerirock.com"] [uri "/xmlrpc.php"] [unique_id "alkht0srNc68tcT37cAQ9gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 17:52:29 (12 hours ago)	(mod_security) mod_security (id:240335) triggered by 120.29.87.12 (12.87.29.120-rev.convergeict.com) ... show more (mod_security) mod_security (id:240335) triggered by 120.29.87.12 (12.87.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:52:24.752300 2026] [security2:error] [pid 21235:tid 21235] [client 120.29.87.12:51263] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.87.12 (+1 hits since last alert)\|edgebiopharma.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edgebiopharma.com"] [uri "/xmlrpc.php"] [unique_id "alkaWAs9AfDYgwDROZy5yQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 17:21:31 (12 hours ago)	(mod_security) mod_security (id:240335) triggered by 120.29.87.12 (12.87.29.120-rev.convergeict.com) ... show more (mod_security) mod_security (id:240335) triggered by 120.29.87.12 (12.87.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:21:27.123537 2026] [security2:error] [pid 18254:tid 18254] [client 120.29.87.12:16032] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.87.12 (+1 hits since last alert)\|adlc18.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "adlc18.org"] [uri "/xmlrpc.php"] [unique_id "alkTF2MYTM8bS1719r2SqQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 huginet	2026-07-16 16:47:41 (13 hours ago)	120.29.87.12 - - [16/Jul/2026:18:47:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/12.1; ... show more 120.29.87.12 - - [16/Jul/2026:18:47:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/12.1; WordPress/6.4; http://site90373884.com" 120.29.87.12 - - [16/Jul/2026:18:47:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 15:06:46 (15 hours ago)	(mod_security) mod_security (id:225170) triggered by 120.29.87.12 (12.87.29.120-rev.convergeict.com) ... show more (mod_security) mod_security (id:225170) triggered by 120.29.87.12 (12.87.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 11:06:39.445588 2026] [security2:error] [pid 4073:tid 4073] [client 120.29.87.12:9305] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|blublk.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blublk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aljzf9nHEUj9o9Pd0pFQFwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-07-16 14:53:23 (15 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇫🇷 masterguru	2026-07-16 03:45:58 (1 day ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-07-15 14:45:10 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 120.29.87.12 (12.87.29.120-rev.convergeict.com) ... show more (mod_security) mod_security (id:240335) triggered by 120.29.87.12 (12.87.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 10:45:04.973748 2026] [security2:error] [pid 14272:tid 14272] [client 120.29.87.12:4395] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.87.12 (+1 hits since last alert)\|oogeothermal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "oogeothermal.com"] [uri "/xmlrpc.php"] [unique_id "alec8DGEYzriPmLlBBY-tgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-15 14:09:11 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 RAP	2026-05-12 13:53:14 (2 months ago)	2026-05-12 13:53:14 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-05-03 12:12:36 (2 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇵🇱 nfsec.pl	2026-01-07 04:13:21 (6 months ago)	Detected: TCP scan on port: 23 with flags: SYN	Port Scan
Anonymous	2025-09-15 01:37:19 (10 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-01-29 01:57:57 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇬🇧 Steve	2024-05-22 15:48:14 (2 years ago)	Attempts against non-existent wordpress site	Brute-Force Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4883:1000::c

🇩🇪 202.71.141.170

🇨🇴 190.0.63.226

🇳🇱 185.212.129.205

🇳🇱 176.65.148.2

🇺🇸 162.216.149.36

🇺🇸 159.89.234.174

🇮🇳 122.187.230.215

🇻🇳 103.189.208.13

🇺🇸 100.29.192.27

🇮🇳 98.70.32.248

🇫🇷 91.196.152.120

🇷🇴 80.94.95.217

🇺🇸 34.138.112.84

🇧🇷 20.226.26.5

🇷🇴 2.57.121.112

🇧🇷 189.50.142.78

🇦🇷 186.22.117.120

🇺🇸 172.202.9.120

🇺🇸 147.185.132.151