JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.82.143

120.82.82.143 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 5%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.82.143

Whois 120.82.82.143

IP Abuse Reports for 120.82.82.143:

This IP address has been reported a total of 9 times from 3 distinct sources. 120.82.82.143 was first reported on April 16th 2025, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-18 19:28:29 (23 hours ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.143 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 15:28:20.825570 2026] [security2:error] [pid 13122:tid 13122] [client 120.82.82.143:64963] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.aden.us\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.aden.us"] [uri "/"] [unique_id "ajRG1DXxw-dz1PqTbjNgeQAAAC8"], referer: http://www.aden.us/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 19:52:55 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.143 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 15:52:48.630386 2026] [security2:error] [pid 7479:tid 7479] [client 120.82.82.143:63088] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.cortesinsulation.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.cortesinsulation.com"] [uri "/"] [unique_id "ajL7EETVPAQCEjIkLOaZyAAAAAg"], referer: http://www.cortesinsulation.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 20:24:04 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.143 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 16:23:56.276076 2026] [security2:error] [pid 14548:tid 14548] [client 120.82.82.143:9847] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.robertseyewear.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.robertseyewear.com"] [uri "/"] [unique_id "aiMwXCvccrAZBC_BphCc6wAAAAo"], referer: http://www.robertseyewear.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-11-24 04:50:18 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇳 ThreatBook.io	2025-10-06 22:22:19 (8 months ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.82.143 2025-10 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.82.143 2025-10-06 21:42:48 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-07-19 22:27:06 (10 months ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.82.143 2025-07 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.82.143 2025-07-19 14:16:59 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-07-05 01:22:47 (11 months ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.82.143 2025-07 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.82.143 2025-07-04 04:23:44 /config.json show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-04 22:31:08 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.82.143 2025-05 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.82.143 2025-05-04 23:59:23 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-16 22:38:39 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.82.143 2025-04 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.82.143 2025-04-16 06:53:13 /config.json 2025-04-16 23:51:13 /favicon.ico show less	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.103

🇺🇸 163.123.203.97

🇳🇱 91.92.40.217

🇳🇱 81.19.216.113

🇷🇺 45.83.94.95

🇬🇧 35.203.211.71

🇧🇷 191.239.244.6

🇸🇬 178.128.51.84

🇫🇮 147.185.133.242

🇵🇭 120.28.109.188

🇵🇰 111.92.138.174

🇮🇱 95.35.29.192

🇨🇦 51.222.40.59

🇳🇱 45.148.10.200

🇳🇱 45.148.10.183

🇳🇱 45.142.193.169

🇬🇧 35.203.210.192

🇬🇧 193.163.125.236

🇳🇱 185.224.128.16

🇨🇭 178.197.218.246