JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.84.36

120.82.84.36 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 5%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.84.36

Whois 120.82.84.36

IP Abuse Reports for 120.82.84.36:

This IP address has been reported a total of 12 times from 3 distinct sources. 120.82.84.36 was first reported on March 18th 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 21:05:06 (20 hours ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 17:04:57.002794 2026] [security2:error] [pid 27314:tid 27314] [client 120.82.84.36:16719] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.joebankx.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.joebankx.com"] [uri "/"] [unique_id "ak67eU51diy2QMXBEtmKOAAAAAQ"], referer: http://www.joebankx.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 23:41:29 (3 days ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 19:41:23.587121 2026] [security2:error] [pid 4101:tid 4101] [client 120.82.84.36:16122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|godplusus.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "godplusus.com"] [uri "/index.html"] [unique_id "akrro62AEG-xQ45G0R6-IwAAAAY"], referer: http://godplusus.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 20:05:06 (3 weeks ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:05:00.463073 2026] [security2:error] [pid 19776:tid 19793] [client 120.82.84.36:26915] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.citydentalclinic.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.citydentalclinic.com"] [uri "/"] [unique_id "ai8JbNU69JRwDrrSSxj6MAAAAI8"], referer: http://www.citydentalclinic.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 02:19:00 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 22:18:55.489708 2026] [security2:error] [pid 3552:tid 3552] [client 120.82.84.36:24088] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|artspacecleveland.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "artspacecleveland.org"] [uri "/"] [unique_id "ah49jzNYN99e3FUX4xVuTwAAAA4"], referer: http://artspacecleveland.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 01:10:18 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 21:10:10.214667 2026] [security2:error] [pid 29030:tid 29041] [client 120.82.84.36:22777] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|the-aquifer.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "the-aquifer.com"] [uri "/"] [unique_id "aheV8sYk1Q3o36r5WoQ4bQAAAIM"], referer: http://the-aquifer.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 23:53:07 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 19:53:01.556000 2026] [security2:error] [pid 29335:tid 29335] [client 120.82.84.36:24382] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|friedeprod.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "friedeprod.com"] [uri "/"] [unique_id "ahYyXR8hB5y-96KHY1bxnwAAAAg"], referer: http://friedeprod.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 21:53:47 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 17:53:39.998296 2026] [security2:error] [pid 4955:tid 4962] [client 120.82.84.36:21862] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.dulemba.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.dulemba.com"] [uri "/"] [unique_id "ahDQY1dKNUC2wVrqb6xL2wAAAYU"], referer: https://www.dulemba.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-21 22:28:40 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 18:28:33.707015 2026] [security2:error] [pid 20715:tid 20715] [client 120.82.84.36:42626] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|justjunglejuice.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "justjunglejuice.org"] [uri "/"] [unique_id "ab8bkaPvDz-aFgb48bftNAAAAAA"], referer: http://justjunglejuice.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-11-26 03:34:05 (7 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇳 ThreatBook.io	2025-07-22 00:23:32 (11 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.36 2025-07-21 23: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.36 2025-07-21 23:25:33 /guard.html show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-03 01:19:29 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.36 2025-06-02 05: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.36 2025-06-02 05:42:09 /Login_files/saved_resource.html show less	Web App Attack
🇨🇳 ThreatBook.io	2025-03-18 02:04:25 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.36 2025-03-1 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.84.36 2025-03-17 06:50:14 / show less	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.175

🇺🇸 195.184.76.100

🇬🇧 185.216.145.183

🇵🇱 185.79.139.16

🇺🇸 162.216.149.87

🇺🇸 147.185.132.128

🇳🇱 138.226.239.7

🇲🇦 105.158.8.223

🇷🇺 79.135.251.82

🇵🇱 46.203.196.77

🇦🇷 200.59.178.13

🇸🇩 197.252.106.207

🇳🇮 190.212.235.217

🇦🇷 181.28.27.213

🇰🇿 178.90.224.181

🇮🇩 163.7.4.169

🇺🇸 162.216.150.177

🇺🇸 91.230.168.16

🇦🇪 83.110.184.40

🇳🇱 64.225.75.246