JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.83.75

120.82.83.75 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 4%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.83.75

Whois 120.82.83.75

IP Abuse Reports for 120.82.83.75:

This IP address has been reported a total of 9 times from 4 distinct sources. 120.82.83.75 was first reported on July 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-10-21 03:49:48 (1 day ago)	[21/Oct/2026:06:49:47 +0300] -- 120.82.83.75 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /c ... show more [21/Oct/2026:06:49:47 +0300] -- 120.82.83.75 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /config.json HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 23:33:07 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 19:33:03.282013 2026] [security2:error] [pid 7259:tid 7259] [client 120.82.83.75:65476] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|player-care.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "player-care.com"] [uri "/"] [unique_id "alLSr4ysWzNvvM95CJyBkQAAAAY"], referer: http://player-care.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 01:24:04 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 21:24:00.581620 2026] [security2:error] [pid 30626:tid 30626] [client 120.82.83.75:64701] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.texaspamman.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.texaspamman.com"] [uri "/"] [unique_id "ak2msLLcMbGjrEifGDZfIwAAABE"], referer: http://www.texaspamman.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 19:49:30 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 15:49:22.212271 2026] [security2:error] [pid 851:tid 851] [client 120.82.83.75:6575] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.tgaguide.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.tgaguide.com"] [uri "/"] [unique_id "aixiwhM9txihIGJ8hVgHpQAAAAw"], referer: http://www.tgaguide.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 04:17:37 (6 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 00:17:27.853910 2026] [security2:error] [pid 30776:tid 30776] [client 120.82.83.75:61714] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.nlc-calumet.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.nlc-calumet.org"] [uri "/"] [unique_id "ac8_V8vJn4dmcLzOxw44KAAAAAM"], referer: http://www.nlc-calumet.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 22:28:39 (8 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.83.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 17:28:33.619602 2026] [security2:error] [pid 14924:tid 14924] [client 120.82.83.75:38494] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.aguasolar.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.aguasolar.com"] [uri "/"] [unique_id "aY5UEenLATWrBZXr_QHlhgAAABE"], referer: https://www.aguasolar.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 exxos	2025-07-27 22:41:20 (1 year ago)	Attacks with Bad user agents	Hacking
🇳🇱 exxos	2025-07-13 02:41:25 (1 year ago)	Attacks with Bad user agents	Hacking
🇨🇳 ThreatBook.io	2025-07-01 22:56:22 (1 year ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.82.83.75 2025- ... show more ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.82.83.75 2025-07-01 04:22:01 /favicon.ico show less	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 189.81.71.129

🇨🇳 182.92.163.65

🇨🇿 109.164.51.232

🇬🇧 195.206.182.196

🇦🇷 186.61.248.205

🇫🇷 85.217.140.30

🇭🇰 43.132.236.253

🇰🇷 211.104.198.147

🇹🇳 197.11.191.109

🇵🇰 182.188.24.243

🇧🇷 177.135.206.10

🇺🇸 172.83.157.226

🇺🇸 162.216.150.186

🇩🇪 159.223.27.82

🇧🇸 153.67.179.187

🇨🇳 124.88.113.215

🇮🇩 103.158.121.21

🇺🇦 91.237.107.4

🇺🇸 65.49.20.86

🇺🇸 64.62.197.182