JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.8.164.134

120.8.164.134 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 4%: ?

ISP	China Unicom Heibei Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Luancheng, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.8.164.134

Whois 120.8.164.134

IP Abuse Reports for 120.8.164.134:

This IP address has been reported a total of 7 times from 2 distinct sources. 120.8.164.134 was first reported on March 29th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-16 20:09:38 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.8.164.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.8.164.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:09:34.447014 2026] [security2:error] [pid 27100:tid 27100] [client 120.8.164.134:51949] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.goldengatecorgis.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.goldengatecorgis.org"] [uri "/"] [unique_id "alk6fprVciE3VhMMgDJ7ywAAAAE"], referer: http://www.goldengatecorgis.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 18:58:54 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.8.164.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.8.164.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 14:58:48.499951 2026] [security2:error] [pid 18458:tid 18458] [client 120.8.164.134:51822] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|watongalodging.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "watongalodging.com"] [uri "/index.html"] [unique_id "alfYaGibCBslSgVQ4FmIuQAAAAU"], referer: https://watongalodging.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 20:41:12 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 120.8.164.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.8.164.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 16:41:07.644571 2026] [security2:error] [pid 12280:tid 12280] [client 120.8.164.134:24775] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|bennoyes.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "bennoyes.com"] [uri "/"] [unique_id "agOQY9t6wcK1OrrtnIPCVAAAAAw"], referer: https://bennoyes.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-11 00:19:17 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.8.164.134 2026-05-10 15 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.8.164.134 2026-05-10 15:00:57 /assets/favicon-7901bd695fb93edb07975966062049829afb56cf11511236e61bcf425070e36e.png show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-06 01:31:38 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.8.164.134 2026-05-05 23 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.8.164.134 2026-05-05 23:39:17 /assets/img/touch-icon-192x192.png show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-25 23:47:29 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 120.8.164.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.8.164.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 19:47:24.291691 2026] [security2:error] [pid 4258:tid 4258] [client 120.8.164.134:21561] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|carolinapetportraits.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "carolinapetportraits.com"] [uri "/"] [unique_id "ae1SjIRQDp-qBoDriLnssAAAAAQ"], referer: http://carolinapetportraits.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-29 04:03:31 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.8.164.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.8.164.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 00:03:24.090833 2026] [security2:error] [pid 19960:tid 19960] [client 120.8.164.134:28778] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.bigskyprints.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.bigskyprints.com"] [uri "/"] [unique_id "acikjMRsuV0ZUBfHZuGJAAAAAAE"], referer: http://www.bigskyprints.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.50

🇨🇴 190.108.77.180

🇭🇰 112.119.21.245

🇨🇳 106.75.227.248

🇺🇸 13.86.117.6

🇩🇪 2.26.51.95

🇨🇳 1.83.125.51

🇧🇷 200.194.234.104

🇨🇳 171.108.182.206

🇺🇸 147.185.132.78

🇨🇳 121.29.85.138

🇻🇳 116.99.174.58

🇨🇳 110.179.80.243

🇮🇳 103.211.54.251

🇷🇴 92.118.39.231

🇫🇷 85.217.140.43

🇺🇸 77.91.118.18

🇺🇸 69.249.115.249

🇺🇸 66.132.172.235

🇩🇪 45.3.45.149