AbuseIPDB » 185.122.130.237
185.122.130.237 was found in our database!
This IP was reported 5 times. Confidence of
Abuse
is 4% : ?
ISP
NGS
Usage Type
Fixed Line ISP
ASN
AS25335
Domain Name
ngsuk.com
Country
๐ฌ๐ง
United Kingdom of Great Britain and Northern Ireland
City
London, England
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.122.130.237 :
This IP address has been reported a total of
5
times from
1 distinct
source.
185.122.130.237 was first reported on
May 19th 2026 , and the most recent report was
2 days ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฎ๐ฉ
hermawan
2026-06-19 06:09:54
(2 days ago)
[Fri Jun 19 13:09:53.584017 2026] [security2:error] [pid 473015:tid 140628172175040] [client 185.122 ...
show more
[Fri Jun 19 13:09:53.584017 2026] [security2:error] [pid 473015:tid 140628172175040] [client 185.122.130.237:18164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba"] [unique_id "ajTdMZILQ9hJ_Vy11J3QBgAECwU"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[473021] [DJQgJNU3Occ] [ajTdMZILQ9hJ_Vy11J3QBgAECwU
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-06-11 03:16:24
(1 week ago)
[Thu Jun 11 10:16:23.347543 2026] [security2:error] [pid 1252194:tid 139768707835584] [client 185.12 ...
show more
[Thu Jun 11 10:16:23.347543 2026] [security2:error] [pid 1252194:tid 139768707835584] [client 185.122.130.237:64778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026"] [unique_id "aioohw7865SAnq47UJkwpwACwhg"], referer https://www.bmkg.go.
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-06-05 13:12:58
(2 weeks ago)
[Fri Jun 05 20:12:55.641116 2026] [security2:error] [pid 1028370:tid 140021590902464] [client 185.12 ...
show more
[Fri Jun 05 20:12:55.641116 2026] [security2:error] [pid 1028370:tid 140021590902464] [client 185.122.130.237:6962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /pdfjs/web/images/toolbarButton-editorHighlight.svg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/images/toolbarButton-editorHighlight.svg"] [unique_id "aiLLV004S3mJEyjSCjGPNwACkgI"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1028390] [5OI9a4FHKmY] [aiLLV004S3mJEyjSCjGPNwACkgI] keep_alive=[1] [2026-06-05 20:12:55.641119] [R:aiLLV004S3mJEyjSCjGPNwACkgI] UA:'Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-05-22 05:30:46
(4 weeks ago)
[Fri May 22 12:30:42.322636 2026] [security2:error] [pid 223913:tid 140471568381632] [client 185.122 ...
show more
[Fri May 22 12:30:42.322636 2026] [security2:error] [pid 223913:tid 140471568381632] [client 185.122.130.237:64462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "624"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [unique_id "ag_qAlUKyip-HLynt0m-QgAAlQs"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[223938] [F8ZoVOG9Ri0] [ag_qAlUKyip-HLynt0m-QgAAlQs] keep_alive=[1] [2026-05-22 12:30:42.322640] [R:ag_qAlUKyip-HLynt0m-QgAAlQs] UA:'Mozilla/5.0 (Linux; Android 9; SM-
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-05-19 17:04:04
(1 month ago)
[Wed May 20 00:03:59.886564 2026] [security2:error] [pid 135819:tid 140082949310144] [client 185.122 ...
show more
[Wed May 20 00:03:59.886564 2026] [security2:error] [pid 135819:tid 140082949310144] [client 185.122.130.237:13070] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "857"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/2.0 Request URI RAW = /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur Request Basename = e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CR
...
show less
Email Spam
Hacking
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: