JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.84.239

120.82.84.239 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 13%: ?

13%

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.84.239

Whois 120.82.84.239

IP Abuse Reports for 120.82.84.239:

This IP address has been reported a total of 4 times from 3 distinct sources. 120.82.84.239 was first reported on May 1st 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-07-02 19:11:18 (12 hours ago)	07/03/2026-02:11:10.812383 [Drop] [] [1:33212721:1] Suricata 🐾 - 🚨 Curl User Agent 🌐 (TLS1.3 conn ... show more 07/03/2026-02:11:10.812383 [Drop] [] [1:33212721:1] Suricata 🐾 - 🚨 Curl User Agent 🌐 (TLS1.3 connection to FQDN) [**] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 120.82.84.239:59221 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇺🇸 TPI-Abuse	2026-06-06 10:01:20 (3 weeks ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.239 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 06:01:15.528133 2026] [security2:error] [pid 12439:tid 12439] [client 120.82.84.239:56546] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.jillbauman.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jillbauman.com"] [uri "/"] [unique_id "aiPv6zM1297PSzxcfhHzwgAAAAc"], referer: https://www.jillbauman.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-08-22 23:19:27 (10 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.239 2025-08-22 17 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.239 2025-08-22 17:50:24 /webman/favicon.ico?v=4399 show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-01 00:11:56 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.239 2025-04-30 21 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.239 2025-04-30 21:39:17 / show less	Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 176.88.28.173

🇺🇸 172.253.240.121

🇺🇸 172.253.192.18

🇺🇸 152.32.183.31

🇮🇳 114.143.234.38

🇺🇸 65.181.111.19

🇨🇳 45.126.112.36

🇲🇩 37.221.66.43

🇮🇩 36.82.92.217

🇬🇧 31.14.254.65

🇬🇧 2a06:4880:2000::29

🇨🇳 222.71.205.34

🇦🇷 181.91.107.169

🇩🇪 152.53.42.70

🇺🇸 152.32.206.87

🇰🇷 111.118.47.8

🇹🇷 94.154.43.99

🇫🇷 85.217.140.5

🇺🇦 31.42.184.185

🇨🇦 172.105.3.121