JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.82.206

120.82.82.206 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 11%: ?

11%

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.82.206

Whois 120.82.82.206

IP Abuse Reports for 120.82.82.206:

This IP address has been reported a total of 12 times from 2 distinct sources. 120.82.82.206 was first reported on November 17th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-08 05:24:21 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 01:24:14.664124 2026] [security2:error] [pid 17106:tid 17106] [client 120.82.82.206:29869] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|ranbarker.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ranbarker.com"] [uri "/"] [unique_id "aiZR_ry8HDPFatbFW4TDgAAAACM"], referer: http://ranbarker.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 21:56:44 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 17:56:38.279197 2026] [security2:error] [pid 30656:tid 30656] [client 120.82.82.206:16178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.tribwatch.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.tribwatch.com"] [uri "/"] [unique_id "aiH0llpEhJ0zzu_3y_wsWAAAAAU"], referer: https://www.tribwatch.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 18:53:36 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 14:53:27.939787 2026] [security2:error] [pid 17261:tid 17325] [client 120.82.82.206:12331] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|chanyin.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "chanyin.org"] [uri "/"] [unique_id "aiHJp5HwWGFOZMHpktGImAAAAIY"], referer: http://chanyin.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 20:50:59 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 16:50:55.158490 2026] [security2:error] [pid 23159:tid 23159] [client 120.82.82.206:13778] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|artbyrt.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "artbyrt.com"] [uri "/"] [unique_id "ahyfLwRaA0HRRaj1UYb-pwAAAAI"], referer: http://artbyrt.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 21:19:30 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 17:19:26.768881 2026] [security2:error] [pid 18258:tid 18258] [client 120.82.82.206:23415] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.justjunglejuice.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.justjunglejuice.org"] [uri "/"] [unique_id "ageN3rv6J2izQBadh8bLaAAAAAI"], referer: http://www.justjunglejuice.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-12 22:37:30 (1 month ago)	ThreatBook Intelligence: Mobile,Spam more details on https://threatbook.io/ip/120.82.82.206 2026-05- ... show more ThreatBook Intelligence: Mobile,Spam more details on https://threatbook.io/ip/120.82.82.206 2026-05-12 03:02:21 /config.json show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 20:10:55 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 16:10:47.553310 2026] [security2:error] [pid 2326:tid 2326] [client 120.82.82.206:24224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.andamiospime.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.andamiospime.com"] [uri "/"] [unique_id "agOJR92MGuxgPRwXNTQI7QAAABs"], referer: http://www.andamiospime.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-24 19:01:31 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 15:01:26.627250 2026] [security2:error] [pid 10231:tid 10231] [client 120.82.82.206:20523] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|rallyasturias.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "rallyasturias.com"] [uri "/"] [unique_id "aeu-BkOWhRmMwema7466EgAAAAQ"], referer: http://rallyasturias.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-14 21:47:21 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.82.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 16:47:15.657829 2026] [security2:error] [pid 6980:tid 6980] [client 120.82.82.206:15823] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.toddgoranson.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.toddgoranson.com"] [uri "/"] [unique_id "aZDtY6NLdRE3x6X5RCKFPAAAABY"], referer: https://www.toddgoranson.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-02-11 22:30:13 (4 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.82.206 2026-02- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.82.206 2026-02-11 18:19:52 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-21 22:41:23 (6 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.82.206 2025-11- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.82.206 2025-11-21 14:56:04 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-17 22:38:50 (6 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.82.206 2025-11- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.82.206 2025-11-17 07:45:46 /favicon.ico show less	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.145.0.18

🇺🇸 165.232.143.119

🇺🇸 162.240.109.188

🇫🇮 147.185.133.140

🇺🇸 129.121.85.48

🇨🇳 124.133.10.66

🇨🇳 120.196.66.80

🇭🇰 119.28.9.170

🇨🇳 112.86.225.103

🇬🇧 35.203.211.175

🇫🇷 91.231.89.83

🇧🇬 62.133.47.13

🇳🇱 45.148.10.152

🇧🇷 205.210.31.215

🇺🇸 142.248.80.205

🇨🇳 140.246.137.102

🇲🇾 121.122.119.170

🇩🇪 103.241.51.126

🇳🇱 45.156.87.93

🇧🇷 43.164.195.160