JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.84.43

120.82.84.43 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 12%: ?

12%

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.84.43

Whois 120.82.84.43

IP Abuse Reports for 120.82.84.43:

This IP address has been reported a total of 15 times from 4 distinct sources. 120.82.84.43 was first reported on January 19th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-24 18:55:00 (3 hours ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 14:54:54.964436 2026] [security2:error] [pid 11353:tid 11353] [client 120.82.84.43:13955] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|watongalodging.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "watongalodging.com"] [uri "/index.html"] [unique_id "ajwn_gUe1GKEsuVQJgin8wAAAAg"], referer: https://watongalodging.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 18:55:57 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 14:55:49.799460 2026] [security2:error] [pid 26410:tid 26410] [client 120.82.84.43:15137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|drbbenefits.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "drbbenefits.com"] [uri "/"] [unique_id "ajrWtYCkvqabncK0F3aahQAAAAc"], referer: http://drbbenefits.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 20:54:13 (2 days ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 16:54:05.432537 2026] [security2:error] [pid 23825:tid 23825] [client 120.82.84.43:16321] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|craftammie.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "craftammie.com"] [uri "/"] [unique_id "ajmg7ZxscvbWK0f9uG7Q1QAAACU"], referer: http://craftammie.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-06 02:55:37 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.84.43 2026-05- ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.82.84.43 2026-05-05 22:58:19 / 2026-05-05 11:32:56 /sitemap.xml show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-04 20:39:32 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 16:39:27.048581 2026] [security2:error] [pid 4520:tid 4520] [client 120.82.84.43:43713] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.russiacoin.info\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.russiacoin.info"] [uri "/"] [unique_id "afkD_8_TbW0o_-sgSPh8jgAAAAM"], referer: http://www.russiacoin.info/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-04 18:27:41 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 14:27:33.430027 2026] [security2:error] [pid 25750:tid 25750] [client 120.82.84.43:42540] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|perrycomo.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "perrycomo.com"] [uri "/"] [unique_id "afjlFX_1lJxQDunFz8YaRwAAAAo"], referer: http://perrycomo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-27 20:35:12 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 16:35:04.093985 2026] [security2:error] [pid 11527:tid 11527] [client 120.82.84.43:25450] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.levabetads.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.levabetads.com"] [uri "/"] [unique_id "ae_IeFRKZhagiw3dhqfHHQAAABM"], referer: http://www.levabetads.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-27 18:39:04 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 14:38:59.214945 2026] [security2:error] [pid 14323:tid 14323] [client 120.82.84.43:24662] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|alanmariotti.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "alanmariotti.com"] [uri "/"] [unique_id "ae-tQ64R0gMYwAIMM7kbugAAABY"], referer: http://alanmariotti.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-24 04:15:13 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 00:14:58.255394 2026] [security2:error] [pid 24910:tid 24910] [client 120.82.84.43:13811] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.barnrods.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.barnrods.com"] [uri "/"] [unique_id "acIPwjHrDgdROc63NcovXAAAAAc"], referer: http://www.barnrods.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 21:31:26 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 17:31:20.645460 2026] [security2:error] [pid 11226:tid 11226] [client 120.82.84.43:55090] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.namefinder.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.namefinder.com"] [uri "/"] [unique_id "abXTqES-18TsH3KzKEMhkgAAAAM"], referer: http://www.namefinder.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 23:46:40 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 120.82.84.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 18:46:36.833108 2026] [security2:error] [pid 3188:tid 3188] [client 120.82.84.43:26733] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.phantomkennels.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.phantomkennels.com"] [uri "/"] [unique_id "aZzm3J-kxpqc0xg-ZciqvgAAAAk"], referer: http://www.phantomkennels.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-08-18 00:33:37 (10 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.43 2025-08-17 19: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.43 2025-08-17 19:56:34 /config.json show less	Web App Attack
🇨🇳 ThreatBook.io	2025-07-03 00:34:09 (11 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.43 2025-07-02 06: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.84.43 2025-07-02 06:09:46 /robots.txt show less	Web App Attack
Anonymous	2025-02-03 22:30:39 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇳🇱 Deveroonie	2025-01-19 06:27:58 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK ASN: 17816 (CHINA169-GZ China ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK ASN: 17816 (CHINA169-GZ China Unicom IP network China169 Guangdong province) Protocol: HTTP/1.1 (GET method) Zone: woody.cat Endpoint: / Timestamp: 2025-01-19T06:26:45Z Ray ID: 9044c14a8e97103a UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 198.50.239.95

🇩🇪 188.245.244.188

🇺🇸 107.173.179.178

🇮🇳 103.235.3.179

🇳🇱 176.65.132.149

🇮🇳 172.69.178.87

🇨🇳 116.205.96.31

🇨🇳 116.179.32.156

🇰🇷 115.91.48.142

🇺🇸 107.167.34.125

🇳🇱 91.92.40.204

🇳🇱 91.92.40.52

🇺🇸 74.125.76.30

🇨🇳 39.154.3.148

🇨🇳 39.128.17.8

🇫🇷 37.44.238.68

🇬🇧 2a06:4880:a000::be

🇨🇳 223.88.64.8

🇳🇱 176.65.139.181

🇨🇳 122.189.107.246