JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.116.173.185

185.116.173.185 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 13%: ?

13%

ISP	NGS
Usage Type	Fixed Line ISP
ASN	AS25335
Domain Name	ngsuk.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.116.173.185

Whois 185.116.173.185

IP Abuse Reports for 185.116.173.185:

This IP address has been reported a total of 5 times from 2 distinct sources. 185.116.173.185 was first reported on May 6th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-25 09:10:20 (5 hours ago)	[Thu Jun 25 16:10:20.058016 2026] [security2:error] [pid 1996002:tid 140674231998144] [client 185.11 ... show more [Thu Jun 25 16:10:20.058016 2026] [security2:error] [pid 1996002:tid 140674231998144] [client 185.116.173.185:33630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ajzwfKyMexjQIWNnbQFOfwADQRg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1996027] [44R2XNCWcmk] [ajzwfKyMexjQIWNnbQFOfwADQRg] keep_alive=[1] [2026-06-25 16:10:20.058020] [R:ajzwfKyMexjQIWNnbQFOfwADQRg] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/26.0 Chrome/122.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim ... show less	Email Spam Hacking
🇺🇸 MPL	2026-05-31 01:09:17 (3 weeks ago)	tcp/443 (8 or more attempts)	Port Scan
🇮🇩 hermawan	2026-05-30 14:45:14 (3 weeks ago)	[Sat May 30 21:45:10.230470 2026] [authz_core:error] [pid 413885:tid 140573691320000] [client 185.11 ... show more [Sat May 30 21:45:10.230470 2026] [authz_core:error] [pid 413885:tid 140573691320000] [client 185.116.173.185:6204] AH01630: client denied by server configuration: /var/www/index.php [staklim-malang.info] [staklim-malang.info] top=[413912] [IwcUAsrvkPM] [ahr39rMx_Np0HWTiRwGzxQACQwU] keep_alive=[1] [2026-05-30 21:45:10.230474] [R:ahr39rMx_Np0HWTiRwGzxQACQwU] UA:'Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36' Host:'staklim-malang.info:443' ACCEPT:'/' Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-20 03:25:38 (1 month ago)	[Wed May 20 10:25:35.731289 2026] [security2:error] [pid 473476:tid 140082852816576] [client 185.116 ... show more [Wed May 20 10:25:35.731289 2026] [security2:error] [pid 473476:tid 140082852816576] [client 185.116.173.185:21444] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "857"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/2.0 Request URI RAW = /index.php/profil/meteorologi/list-all-categories Request Basename = list-all-categories"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostn ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-06 09:37:22 (1 month ago)	05/06/2026-10:00:23.872526 [Drop] [] [1:2100000415:0] Suricata match TLS JA4 scan Uniq Zeek no 41 ... show more 05/06/2026-10:00:23.872526 [Drop] [] [1:2100000415:0] Suricata match TLS JA4 scan Uniq Zeek no 415 with hash_t12d1208h2_d34a8e72043a_31a7e1922da8 [**] [Classification: (null)] [Priority: 3] {TCP} 185.116.173.185:29506 -> 103.166.156.58:443 ... show less	Email Spam Hacking

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.27

🇲🇽 101.44.187.210

🇦🇷 186.158.183.66

🇹🇷 185.254.95.141

🇨🇳 183.92.114.11

🇸🇬 173.239.196.55

🇮🇳 143.110.251.18

🇨🇦 142.93.146.67

🇵🇱 87.251.64.157

🇫🇷 85.217.140.16

🇳🇱 45.153.34.71

🇺🇸 24.239.61.43

🇺🇸 3.228.96.192

🇺🇸 109.105.210.104

🇳🇱 91.92.40.176

🇫🇮 34.88.109.49

🇬🇧 2a0b:4140:103b::2

🇺🇸 2607:f8b0:4001:c12::12c

🇨🇳 2409:8c54:3810:d:203:0:200:117

🇫🇮 157.180.50.75