JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.82.85.240

120.82.85.240 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 5%: ?

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.82.85.240

Whois 120.82.85.240

IP Abuse Reports for 120.82.85.240:

This IP address has been reported a total of 12 times from 3 distinct sources. 120.82.85.240 was first reported on May 5th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-13 15:58:03 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 11:57:57.437965 2026] [security2:error] [pid 17486:tid 17486] [client 120.82.85.240:44260] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.solve4this.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.solve4this.com"] [uri "/"] [unique_id "alULBfSJh4N36Q0YSclq5AAAAAI"], referer: http://www.solve4this.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 05:24:03 (3 days ago)	(mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 01:23:56.199642 2026] [security2:error] [pid 6330:tid 6330] [client 120.82.85.240:8988] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|ran101.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ran101.com"] [uri "/"] [unique_id "alHTbFZwMVGTQRun1VL_oQAAABY"], referer: http://ran101.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 07:05:19 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 03:05:14.997020 2026] [security2:error] [pid 26080:tid 26080] [client 120.82.85.240:13523] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.bsa1688.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.bsa1688.com"] [uri "/"] [unique_id "akIZKr7G7tHhB-hAph6V4wAAAAI"], referer: http://www.bsa1688.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 23:09:41 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 19:09:35.614382 2026] [security2:error] [pid 11799:tid 11799] [client 120.82.85.240:34676] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.stormstrips.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.stormstrips.com"] [uri "/"] [unique_id "aiC0L3I5WUZR9ad4Z1oNgwAAAAU"], referer: http://www.stormstrips.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-29 23:52:02 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 19:51:55.668073 2026] [security2:error] [pid 10412:tid 10412] [client 120.82.85.240:33589] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.wcvfr.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wcvfr.org"] [uri "/index.html"] [unique_id "ahommw3sfT2uQZsHFpCTGwAAACI"], referer: http://www.wcvfr.org/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-25 22:21:50 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.82.85.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 17:21:46.964668 2026] [security2:error] [pid 20273:tid 20273] [client 120.82.85.240:55592] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|reyadecostarica.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "reyadecostarica.com"] [uri "/"] [unique_id "aXaXelRIei8eotAorcUfYQAAAA0"], referer: https://reyadecostarica.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-01-25 00:37:43 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.85.240 2026-01- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.82.85.240 2026-01-24 03:50:41 /open.html 2026-01-24 03:50:39 /tender.html 2026-01-24 03:50:39 /open.html show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-26 00:12:30 (7 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.85.240 2025-11-25 11 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.85.240 2025-11-25 11:28:58 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-09-30 00:05:43 (9 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.85.240 2025-09-29 01 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.85.240 2025-09-29 01:58:33 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-06 00:27:13 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.85.240 2025-05-05 13 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.82.85.240 2025-05-05 13:13:07 /config.json show less	Web App Attack
🇿🇦 IrisFlower	2023-05-05 20:48:39 (3 years ago)	Unauthorized connection attempt detected from IP address 120.82.85.240 to port 443 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2023-05-05 20:42:27 (3 years ago)	Unauthorized connection attempt detected from IP address 120.82.85.240 to port 443 [J]	Port Scan Hacking

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.166

🇺🇸 205.210.31.110

🇵🇱 176.53.159.198

🇯🇵 152.32.202.151

🇫🇮 147.185.133.172

🇺🇸 142.93.51.237

🇵🇰 103.74.21.196

🇷🇺 91.149.117.234

🇺🇸 66.132.186.221

🇺🇸 64.62.197.2

🇨🇳 27.10.16.113

🇺🇸 198.74.58.148

🇬🇧 194.50.235.157

🇬🇧 193.32.209.234

🇧🇷 190.52.69.179

🇱🇹 188.69.225.188

🇿🇦 168.210.178.204

🇳🇱 160.119.69.14

🇵🇰 154.57.212.138

🇺🇸 147.185.132.114