JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.8.164.169

120.8.164.169 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 4%: ?

ISP	China Unicom Heibei Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Luancheng, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.8.164.169

Whois 120.8.164.169

IP Abuse Reports for 120.8.164.169:

This IP address has been reported a total of 5 times from 2 distinct sources. 120.8.164.169 was first reported on June 13th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-15 02:37:04 (4 days ago)	(mod_security) mod_security (id:210831) triggered by 120.8.164.169 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.8.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 22:36:58.014829 2026] [security2:error] [pid 3873:tid 3898] [client 120.8.164.169:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.earthtravel.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.earthtravel.net"] [uri "/"] [unique_id "albyStvJdkL13Dw5fQRfGwAAABY"], referer: http://www.earthtravel.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 10:01:19 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.8.164.169 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.8.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 06:01:13.415056 2026] [security2:error] [pid 32676:tid 32676] [client 120.8.164.169:28001] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|myairbalance.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "myairbalance.org"] [uri "/"] [unique_id "alDC6WHe9xauIu4MEI6DuQAAAAE"], referer: http://myairbalance.org show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 23:10:56 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.8.164.169 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.8.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 19:10:48.639874 2026] [security2:error] [pid 28214:tid 28214] [client 120.8.164.169:25946] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|philipma.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "philipma.com"] [uri "/"] [unique_id "ak7Y-FgMBWdbb5FtcOY_HQAAABE"], referer: https://philipma.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 04:12:57 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 120.8.164.169 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.8.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 00:12:51.410763 2026] [security2:error] [pid 10353:tid 10353] [client 120.8.164.169:28432] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.f4fbbs.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.f4fbbs.com"] [uri "/"] [unique_id "akc2w7luTwXYXB9oHdyqowAAAAo"], referer: http://www.f4fbbs.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-06-13 00:07:10 (1 year ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/120.8.164.169 2025-06-12 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/120.8.164.169 2025-06-12 09:20:13 /robots.txt show less	Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.76

🇧🇷 190.124.178.223

🇩🇪 185.242.3.129

🇸🇬 173.239.196.108

🇩🇪 167.94.145.23

🇳🇱 160.119.71.92

🇸🇬 84.75.155.137

🇳🇱 45.148.10.141

🇫🇮 31.76.77.218

🇺🇸 20.9.15.100

🇳🇱 176.65.148.250

🇨🇳 175.172.246.96

🇨🇳 116.179.37.248

🇺🇸 107.170.61.160

🇵🇰 103.82.121.25

🇮🇷 93.126.31.148

🇨🇳 39.104.50.26

🇧🇷 20.226.26.5

🇧🇷 2804:214:d:31df:a824:c1c3:834f:4b1c

🇸🇬 188.166.241.141