AbuseIPDB » 185.116.172.195
185.116.172.195
This IP was reported 6 times. Confidence of
Abuse
is 13% : ?
ISP
NGS
Usage Type
Fixed Line ISP
ASN
AS25335
Domain Name
ngsuk.com
Country
🇬🇧
United Kingdom of Great Britain and Northern Ireland
City
London, England
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.116.172.195 :
This IP address has been reported a total of
6
times from
2 distinct
sources.
185.116.172.195 was first reported on
May 20th 2026 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-30 17:04:50
(1 week ago)
[Wed Jul 01 00:04:47.171301 2026] [security2:error] [pid 212307:tid 140187054098112] [client 185.116 ...
show more
[Wed Jul 01 00:04:47.171301 2026] [security2:error] [pid 212307:tid 140187054098112] [client 185.116.172.195:16360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan"] [unique_id "akP3Ly7EOOJ9f7P7DHaSbwAARgI"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[212310] [Xw13kjukvO0] [akP3Ly7EOOJ9f7P7DHaSbwAARgI] keep_alive=[1] [2026-07-01 00:04:47.171310] [R:akP3Ly7EOOJ9f7P7DHaSbwAARgI] UA:'Mozilla/5.0 (Linux;
...
show less
Email Spam
Hacking
🇺🇸
kosada.com
2026-06-22 13:11:58
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-06-20 14:43:06
(2 weeks ago)
[Sat Jun 20 21:43:06.509514 2026] [security2:error] [pid 215427:tid 140111348635328] [client 185.116 ...
show more
[Sat Jun 20 21:43:06.509514 2026] [security2:error] [pid 215427:tid 140111348635328] [client 185.116.172.195:31078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan"] [unique_id "ajam-mjoVo1mlud8Km2tBQABwwE"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[215429] [zx1ebXAVxVU] [ajam-mjoVo1mlud8Km2tBQABwwE] keep_alive=[1] [2026-06-20 21:43:06.509521] [R:ajam-mjoVo1mlud8Km2tBQABwwE] UA:'Mozilla/5.0 (Linux; Andr
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-17 05:12:19
(2 weeks ago)
[Wed Jun 17 12:12:18.491664 2026] [security2:error] [pid 1459678:tid 140703616988864] [client 185.11 ...
show more
[Wed Jun 17 12:12:18.491664 2026] [security2:error] [pid 1459678:tid 140703616988864] [client 185.116.172.195:28222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "ajIssj5GHqDmw2aNBCC5HAADAQA"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1459701] [wF2BGqwr6DQ] [ajIssj5GHqDmw2aNBCC5HAADAQA] keep_alive=[1] [2026-06-17 12:12:18.491667] [R:ajIssj5GHqDmw2aNBCC
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-02 02:20:44
(1 month ago)
[Tue Jun 02 09:20:40.030884 2026] [security2:error] [pid 56148:tid 139858170296000] [client 185.116. ...
show more
[Tue Jun 02 09:20:40.030884 2026] [security2:error] [pid 56148:tid 139858170296000] [client 185.116.172.195:28604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /ga-choise-v6.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/ga-choise-v6.js"] [unique_id "ah49-IEAkzILWcFM9EYKPgABCw0"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[56162] [+R4I9TuTL2U] [ah49-IEAkzILWcFM9EYKPgABCw0] keep_alive=[1] [2026-06-02 09:20:40.030887] [R:ah49-IEAkzILWcFM9EYKPgABCw0] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/122.0.2365.99 Version/17.0 Mobile/15E148
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-20 13:31:20
(1 month ago)
[Wed May 20 20:31:19.756860 2026] [security2:error] [pid 884731:tid 140622299129536] [client 185.116 ...
show more
[Wed May 20 20:31:19.756860 2026] [security2:error] [pid 884731:tid 140622299129536] [client 185.116.172.195:33434] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "857"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin HTTP/2.0 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin Request Basename = infografis-bulanan-buletin"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [ta
...
show less
Email Spam
Hacking
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: