JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.83.48

120.82.83.48 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 4%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.83.48

Whois 120.82.83.48

IP Abuse Reports for 120.82.83.48:

This IP address has been reported a total of 9 times from 3 distinct sources. 120.82.83.48 was first reported on May 23rd 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-06 23:27:34 (5 hours ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 19:27:27.372898 2026] [security2:error] [pid 21316:tid 21316] [client 120.82.83.48:24426] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|tatying.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "tatying.com"] [uri "/"] [unique_id "akw53w0RT48oSgAtQ0sH2gAAAAU"], referer: http://tatying.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-04-08 22:42:12 (2 months ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.83.48 2026-04- ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.83.48 2026-04-08 23:31:36 /config.json show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-05 01:14:24 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 21:14:18.311208 2026] [security2:error] [pid 2621:tid 2621] [client 120.82.83.48:22264] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.blue-attitude.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.blue-attitude.net"] [uri "/"] [unique_id "adG3ahbyf5Bq2_9OC8SImAAAAAU"], referer: http://www.blue-attitude.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 00:17:13 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 19:17:09.259668 2026] [security2:error] [pid 589:tid 589] [client 120.82.83.48:20653] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|madbanana.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "madbanana.com"] [uri "/"] [unique_id "aY5thefxRSHpbYzxSY1xtgAAABU"], referer: http://madbanana.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-01-09 23:33:33 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.83.48 2026-01-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.83.48 2026-01-09 20:35:08 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-09-29 23:17:15 (9 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.83.48 2025-09-29 08: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.83.48 2025-09-29 08:38:18 /owa/auth/15.0.1130/themes/resources/favicon.ico show less	Web App Attack
🇳🇱 exxos	2025-09-13 15:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
🇨🇳 ThreatBook.io	2025-07-01 22:56:52 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.83.48 2025-07-01 08: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.83.48 2025-07-01 08:59:19 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-23 23:41:04 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.83.48 2025-05-23 08: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.83.48 2025-05-23 08:31:48 /sitemap.xml show less	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.220

🇫🇷 161.97.74.178

🇵🇰 119.30.119.246

🇨🇳 116.179.32.150

🇸🇬 114.119.150.34

🇭🇰 103.210.22.17

🇸🇬 101.47.26.235

🇳🇱 45.148.10.152

🇨🇳 36.135.100.48

🇺🇸 35.203.182.231

🇺🇸 13.222.61.160

🇭🇰 8.218.142.110

🇭🇰 8.210.103.141

🇰🇷 223.171.94.26

🇵🇰 203.101.186.213

🇮🇩 182.10.98.252

🇻🇳 118.68.129.151

🇻🇳 116.103.41.226

🇮🇩 103.165.122.142

🇧🇩 103.152.107.115