JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.84.182

120.82.84.182 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 4%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.84.182

Whois 120.82.84.182

IP Abuse Reports for 120.82.84.182:

This IP address has been reported a total of 14 times from 2 distinct sources. 120.82.84.182 was first reported on April 12th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-14 23:54:32 (5 days ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 19:54:27.381838 2026] [security2:error] [pid 8239:tid 8239] [client 120.82.84.182:51844] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ashleycroft.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ashleycroft.com"] [uri "/"] [unique_id "albMM83TsUvzXZZlEDEgLgAAAAU"], referer: http://www.ashleycroft.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 19:42:50 (5 days ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 15:42:44.529706 2026] [security2:error] [pid 23316:tid 23316] [client 120.82.84.182:52627] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|tudor-harris.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "tudor-harris.com"] [uri "/index.html"] [unique_id "alaRNJwArGFmUrLWNKD4hAAAACA"], referer: http://tudor-harris.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 04:06:36 (5 days ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 00:06:28.632233 2026] [security2:error] [pid 25035:tid 25174] [client 120.82.84.182:49499] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.adventuresdotcom.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.adventuresdotcom.com"] [uri "/"] [unique_id "alW1xIfzFuC3kzqZj2sOqAAAAUg"], referer: http://www.adventuresdotcom.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 19:32:37 (3 weeks ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 15:32:33.561166 2026] [security2:error] [pid 18406:tid 18406] [client 120.82.84.182:22773] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.jambmaster.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jambmaster.com"] [uri "/"] [unique_id "ajww0dkNFKhewvoRuygi3AAAAC0"], referer: http://www.jambmaster.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-06 23:56:50 (2 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2026-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2026-05-06 12:03:56 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-06 00:22:55 (2 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2026-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2026-05-05 14:54:27 /administrator/templates/isis/favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-04 23:50:07 (2 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2026-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2026-05-04 22:50:57 /sitemap.xml show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 09:34:03 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 05:33:51.955206 2026] [security2:error] [pid 1219842:tid 1219842] [client 120.82.84.182:24773] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|medicalexchangeasinc.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "medicalexchangeasinc.com"] [uri "/"] [unique_id "adTPf25waMx9PTQQ_8OlkwAAAAg"], referer: http://medicalexchangeasinc.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 23:41:03 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 18:40:56.703711 2026] [security2:error] [pid 31123:tid 31123] [client 120.82.84.182:46863] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|fmtmovement.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "fmtmovement.com"] [uri "/"] [unique_id "aZuUCCYHGrBFDLuMAGxk-AAAAA4"], referer: http://fmtmovement.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 16:26:52 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 11:26:46.152267 2026] [security2:error] [pid 9444:tid 9444] [client 120.82.84.182:46602] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|kristencorley.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "kristencorley.com"] [uri "/"] [unique_id "aZsuRsjSOq2dAVkChPvWEgAAABU"], referer: http://kristencorley.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-08 21:43:24 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 16:43:19.574127 2026] [security2:error] [pid 1396723:tid 1396723] [client 120.82.84.182:38215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|hotpay.co\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "hotpay.co"] [uri "/"] [unique_id "aYkDd6u2bhT4TfZKb1dBKAAAAA8"], referer: https://hotpay.co/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-05-31 23:38:46 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2025-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2025-05-31 23:04:56 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-29 23:45:39 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2025-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2025-05-29 08:45:40 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-12 23:48:46 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2025-04- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.182 2025-04-12 23:42:35 / show less	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.127.138.111

🇺🇸 66.132.186.188

🇶🇦 2600:1900:4260:40e::ea

🇧🇷 205.210.31.234

🇳🇱 195.178.110.108

🇬🇧 193.46.0.234

🇩🇪 167.94.146.57

🇺🇸 147.185.132.159

🇨🇳 115.190.211.57

🇺🇸 47.77.229.101

🇺🇸 44.206.224.157

🇸🇬 35.186.144.114

🇨🇳 27.17.144.222

🇳🇱 204.76.203.81

🇮🇩 182.8.98.53

🇺🇸 173.239.240.204

🇺🇸 165.1.64.191

🇺🇸 107.172.134.28

🇧🇫 102.23.31.0

🇷🇺 94.41.141.36