AbuseIPDB » 185.116.172.7
185.116.172.7
This IP was reported 3 times. Confidence of
Abuse
is 4% : ?
ISP
NGS
Usage Type
Fixed Line ISP
ASN
AS25335
Domain Name
ngsuk.com
Country
🇬🇧
United Kingdom of Great Britain and Northern Ireland
City
London, England
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.116.172.7 :
This IP address has been reported a total of
3
times from
1 distinct
source.
185.116.172.7 was first reported on
May 9th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-27 08:30:11
(1 day ago)
[Sat Jun 27 15:30:08.040418 2026] [security2:error] [pid 993212:tid 139939434964672] [client 185.116 ...
show more
[Sat Jun 27 15:30:08.040418 2026] [security2:error] [pid 993212:tid 139939434964672] [client 185.116.172.7:23738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur"] [unique_id "aj-KEMign3LU4jLoQvoe9gABCQQ"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[993217] [Z/xlCHganUM] [aj-KEMign3LU4jLoQvoe9gABCQQ] keep_alive=[1] [2026-0
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-19 21:33:44
(1 week ago)
[Sat Jun 20 04:33:38.254323 2026] [security2:error] [pid 1510017:tid 140501254645440] [client 185.11 ...
show more
[Sat Jun 20 04:33:38.254323 2026] [security2:error] [pid 1510017:tid 140501254645440] [client 185.116.172.7:41464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "ajW1sul5RCvLnJ7XegnouAADUQI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1510020] [UdirC2LwdVM] [ajW1sul5RCvLnJ7XegnouAADUQI] keep_alive=[1] [2026-06-20 04:33:38.254329] [R:ajW1sul5RCvLnJ7XegnouAADUQI] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_6 like Mac OS X) AppleWebKit/605.1.15
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-09 02:48:43
(1 month ago)
[Sat May 09 09:30:31.042929 2026] [security2:error] [pid 288801:tid 140170125788864] [client 185.116 ...
show more
[Sat May 09 09:30:31.042929 2026] [security2:error] [pid 288801:tid 140170125788864] [client 185.116.172.7:9346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "295"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 12; SM-G975U Build/SP1A.210812.016; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "af6cR3hYNKu2Gk4wIM45swAAAEI"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[288885] [MvwWTBli2gw] [af6cR3hYNKu2Gk4wIM45swAAAEI] keep_alive=[0] [2026-05-09 09:30:31.042933] [R:af6cR3hYNKu2Gk4wIM45swAAAEI] UA:'Moz
...
show less
Email Spam
Hacking
Showing 1 to
3
of 3 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: