JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.83.152

120.82.83.152 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 5%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.83.152

Whois 120.82.83.152

IP Abuse Reports for 120.82.83.152:

This IP address has been reported a total of 6 times from 2 distinct sources. 120.82.83.152 was first reported on June 18th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-02 21:45:41 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.152 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 17:45:32.635323 2026] [security2:error] [pid 26576:tid 26576] [client 120.82.83.152:12720] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.mywheatgrass.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.mywheatgrass.com"] [uri "/"] [unique_id "akbb_B69uN9fZ9FsojCjVQAAAAE"], referer: http://www.mywheatgrass.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 18:55:22 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.152 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 14:55:14.644344 2026] [security2:error] [pid 2493:tid 2493] [client 120.82.83.152:13649] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|watongalodging.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "watongalodging.com"] [uri "/"] [unique_id "agyyEsu-Y1p3GwWGitalNAAAABI"], referer: http://watongalodging.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-18 20:44:47 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.152 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 16:44:41.711958 2026] [security2:error] [pid 2647:tid 2647] [client 120.82.83.152:14200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.flavornet.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.flavornet.org"] [uri "/index.html"] [unique_id "agt6OSRnvre9OLIWtZS4HgAAAA8"], referer: http://www.flavornet.org/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 19:20:29 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.152 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 14:20:24.164562 2026] [security2:error] [pid 28860:tid 28860] [client 120.82.83.152:11939] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|phenomenalcattery.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "phenomenalcattery.com"] [uri "/"] [unique_id "aY4n-Pne8BMKnWPAOu8RngAAAA0"], referer: http://phenomenalcattery.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-12-21 22:59:05 (6 months ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.83.152 2025-12 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.83.152 2025-12-21 01:09:51 /config.json show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-18 23:21:09 (1 year ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.82.83.152 2025-0 ... show more ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.82.83.152 2025-06-18 10:18:40 /sitemap.xml show less	Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.119

🇺🇸 207.90.244.19

🇨🇴 201.184.50.251

🇦🇷 190.244.39.224

🇹🇭 122.154.74.204

🇳🇱 91.92.40.11

🇧🇬 79.124.56.250

🇺🇸 45.3.49.75

🇸🇪 20.240.241.205

🇳🇱 178.16.54.137

🇨🇳 120.221.100.79

🇮🇳 103.91.246.101

🇧🇬 79.124.62.134

🇺🇸 52.159.244.177

🇸🇬 47.84.139.117

🇬🇧 35.203.210.50

🇧🇪 34.77.116.137

🇦🇷 200.32.52.150

🇧🇪 198.235.24.254

🇧🇷 189.113.47.155