JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.116.172.99

185.116.172.99 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 12%: ?

12%

ISP	NGS
Usage Type	Fixed Line ISP
ASN	AS25335
Domain Name	ngsuk.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.116.172.99

Whois 185.116.172.99

IP Abuse Reports for 185.116.172.99:

This IP address has been reported a total of 4 times from 3 distinct sources. 185.116.172.99 was first reported on April 20th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-25 17:34:06 (1 day ago)	[Fri Jun 26 00:34:02.018917 2026] [security2:error] [pid 434273:tid 140398205851328] [client 185.116 ... show more [Fri Jun 26 00:34:02.018917 2026] [security2:error] [pid 434273:tid 140398205851328] [client 185.116.172.99:59144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [unique_id "aj1miqBqlRJFQd9kmjwXpgAAyAE"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[434275] [hWfaZZdXBiM] [aj1miqBqlRJFQd9kmjwXpgAAyAE] keep_alive=[1] [2026-06-26 00:34:02.018921] [R:aj1miqBqlRJFQd9kmjwXpgAAyAE] UA:'Mozilla/5.0 (Linux; Android 10; K) Appl ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-25 04:13:38 (1 day ago)	[Thu Jun 25 11:13:37.692385 2026] [security2:error] [pid 1679202:tid 140674656626368] [client 185.11 ... show more [Thu Jun 25 11:13:37.692385 2026] [security2:error] [pid 1679202:tid 140674656626368] [client 185.116.172.99:41108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ajyq8QqylTJjqLT67ysf6AAAkAE"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1679204] [lzphN0ySSGw] [ajyq8QqylTJjqLT67ysf6AAAkAE] keep_alive=[1] [2026-06-25 11:13:37.692392] [R:ajyq8QqylTJjqLT67ysf6AAAkAE] UA:'Mozilla/5.0 (Linux; U; Android 15; SM-A556E Build/AP3A.240905.015.A2; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/139.0.7258.160 Mobile Safari/537.36 OPR ... show less	Email Spam Hacking
🇫🇮 inlink.ltd	2026-05-29 03:00:13 (4 weeks ago)	WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 185.116.172.99 was not ... show more WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 185.116.172.99 was not IP who made PoW GET request earlier show less	DDoS Attack Exploited Host
🇦🇺 ozisp.com.au	2023-04-20 11:59:10 (3 years ago)	GB_NEXTGLOBALSERV-MNT_<33>1681991948 [1:2400021:3593] ET DROP Spamhaus DROP Listed Traffic Inbound g ... show more GB_NEXTGLOBALSERV-MNT_<33>1681991948 [1:2400021:3593] ET DROP Spamhaus DROP Listed Traffic Inbound group 22 [Classification: Misc Attack] [Priority: 2] {TCP} 185.116.172.99:54405 show less	Hacking

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 152.32.135.135

🇨🇳 112.86.225.83

🇺🇸 37.123.192.41

🇺🇸 2602:feda:f395:c47a:bc54:1761:3728:7571

🇺🇸 216.25.89.134

🇺🇸 205.210.31.45

🇬🇧 193.163.125.158

🇬🇹 181.209.150.40

🇧🇷 177.190.89.163

🇧🇷 177.44.71.134

🇸🇬 140.245.43.171

🇩🇿 105.235.139.202

🇫🇷 85.217.140.28

🇸🇬 68.183.190.62

🇯🇲 63.143.99.143

🇨🇴 45.167.250.45

🇺🇸 45.146.55.131

🇬🇧 35.203.211.129

🇭🇰 8.218.44.42

🇮🇳 223.185.56.9