JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.82.178

120.82.82.178 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 5%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.82.178

Whois 120.82.82.178

IP Abuse Reports for 120.82.82.178:

This IP address has been reported a total of 9 times from 3 distinct sources. 120.82.82.178 was first reported on June 11th 2025, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-05 00:14:36 (17 hours ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.178 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 20:14:30.057037 2026] [security2:error] [pid 27108:tid 27108] [client 120.82.82.178:14236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|roselockecasting.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "roselockecasting.com"] [uri "/index.html"] [unique_id "akmh5l-vz5Nxhdj4IzKfkwAAAAs"], referer: http://roselockecasting.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 02:06:54 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.178 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 22:06:46.079517 2026] [security2:error] [pid 24427:tid 24427] [client 120.82.82.178:32606] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.marlinlee.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.marlinlee.com"] [uri "/index.html"] [unique_id "ajdHNmnxpjhfw1dHIxhc_wAAABU"], referer: http://www.marlinlee.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 00:06:47 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.178 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 20:06:43.789175 2026] [security2:error] [pid 11211:tid 11211] [client 120.82.82.178:31468] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|smogsandiego.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "smogsandiego.com"] [uri "/"] [unique_id "ajM2k3E0n5n0mnh9izCXwgAAAAg"], referer: http://smogsandiego.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-05 23:04:08 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.178 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 19:04:02.568156 2026] [security2:error] [pid 14587:tid 14587] [client 120.82.82.178:48722] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.northcoastgolfden.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.northcoastgolfden.com"] [uri "/"] [unique_id "adLqYsirI55u1DOoQf1TVQAAAAI"], referer: http://www.northcoastgolfden.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-29 09:07:12 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.178 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 05:07:07.778460 2026] [security2:error] [pid 15790:tid 15790] [client 120.82.82.178:20533] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.juniperhills.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.juniperhills.net"] [uri "/"] [unique_id "acjru09JbLJSPT7-6CSOvwAAAAs"], referer: http://www.juniperhills.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-11-21 22:34:22 (7 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.82.178 2025-11- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.82.178 2025-11-21 18:36:34 /robots.txt show less	Web App Attack
🇮🇹 VHosting	2025-11-19 21:07:00 (7 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇳 ThreatBook.io	2025-11-12 22:23:40 (7 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.82.178 2025-11- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.82.178 2025-11-12 22:00:11 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-11 22:31:12 (1 year ago)	ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/120.82.82.178 2025- ... show more ThreatBook Intelligence: Zombie,Gateway more details on https://threatbook.io/ip/120.82.82.178 2025-06-11 02:25:06 /sitemap.xml show less	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 202.184.156.3

🇰🇭 119.15.92.62

🇺🇸 2607:f8b0:4004:1007::129

🇨🇳 220.202.112.50

🇹🇷 185.241.102.232

🇨🇳 182.119.227.196

🇩🇿 154.241.55.236

🇸🇪 151.177.77.73

🇺🇸 107.173.233.82

🇻🇳 103.90.227.203

🇷🇺 92.50.143.166

🇺🇸 71.6.134.232

🇸🇬 45.82.78.102

🇿🇦 41.180.112.186

🇺🇸 34.145.251.70

🇧🇩 27.131.13.244

🇮🇳 20.244.20.183

🇨🇳 1.24.16.196

🇨🇳 221.198.81.136

🇨🇳 211.90.189.149