JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.84.178

120.82.84.178 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 4%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.84.178

Whois 120.82.84.178

IP Abuse Reports for 120.82.84.178:

This IP address has been reported a total of 9 times from 4 distinct sources. 120.82.84.178 was first reported on April 26th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-15 02:55:05 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.178 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 22:54:57.406748 2026] [security2:error] [pid 444:tid 444] [client 120.82.84.178:27665] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.clubfansite.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.clubfansite.com"] [uri "/"] [unique_id "alb2ge1wKWUtEtHWwIflEAAAABk"], referer: http://www.clubfansite.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 18:47:54 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.178 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 14:47:47.989856 2026] [security2:error] [pid 7996:tid 7996] [client 120.82.84.178:46890] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ibermar.info\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ibermar.info"] [uri "/"] [unique_id "abWtU4oaMlNy2TxDtzQ5kQAAAA4"], referer: http://www.ibermar.info/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-08 22:48:23 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.178 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 17:48:17.350134 2026] [security2:error] [pid 2983:tid 3043] [client 120.82.84.178:12089] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|ejspizzeriahudson.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ejspizzeriahudson.com"] [uri "/"] [unique_id "aYkSsfQCXOPXjvT5vQza2gAAAME"], referer: http://ejspizzeriahudson.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-10-24 23:03:06 (8 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.178 2025-10-24 01 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.178 2025-10-24 01:18:25 /robots.txt 2025-10-24 01:34:54 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-10-22 22:59:02 (8 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.178 2025-10-22 22 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.178 2025-10-22 22:46:12 /robots.txt 2025-10-22 18:28:57 /sitemap.xml show less	Web App Attack
🇺🇸 kosada.com	2025-09-30 18:27:56 (9 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇨🇳 ThreatBook.io	2025-08-29 23:07:06 (10 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.178 2025-08-29 18 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.178 2025-08-29 18:26:49 /config.json show less	Web App Attack
🇨🇳 yangfan	2025-07-15 14:45:16 (1 year ago)	UFW Blocked [47001/TCP] Source: 120.82.84.178:55422 TTL: 49 Lenth: 60 TOS: 0x00	Port Scan
🇨🇳 ThreatBook.io	2025-04-26 23:43:04 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.178 2025-04- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.178 2025-04-26 00:16:10 /config.json show less	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.100

🇺🇸 67.43.243.158

🇫🇷 54.37.118.95

🇳🇱 45.148.10.157

🇬🇧 44.61.189.181

🇬🇧 198.244.242.232

🇬🇧 198.244.183.132

🇺🇸 173.255.242.196

🇮🇩 163.7.11.126

🇺🇸 162.216.150.244

🇷🇴 92.118.39.77

🇺🇸 91.230.168.125

🇧🇬 91.92.47.252

🇺🇸 66.54.169.3

🇨🇴 45.167.250.45

🇺🇸 44.128.192.145

🇮🇪 3.252.85.20

🇹🇭 203.154.158.195

🇺🇸 198.98.52.229

🇧🇷 189.121.201.249