AbuseIPDB » 185.122.130.99
185.122.130.99 was found in our database!
This IP was reported 5 times. Confidence of
Abuse
is 8% : ?
ISP
NGS
Usage Type
Fixed Line ISP
ASN
AS25335
Domain Name
ngsuk.com
Country
๐ฌ๐ง
United Kingdom of Great Britain and Northern Ireland
City
London, England
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.122.130.99 :
This IP address has been reported a total of
5
times from
3 distinct
sources.
185.122.130.99 was first reported on
May 13th 2026 , and the most recent report was
4 weeks ago .
Old Reports:
The most recent abuse report for this IP address is from
4 weeks ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฎ๐ฉ
hermawan
2026-07-02 04:30:40
(4 weeks ago)
[Thu Jul 02 11:30:39.210403 2026] [security2:error] [pid 42664:tid 140539929196224] [client 185.122. ...
show more
[Thu Jul 02 11:30:39.210403 2026] [security2:error] [pid 42664:tid 140539929196224] [client 185.122.130.99:54840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "akXpb-zWRn6PFuC7iGRdiAACQhg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[42689] [3vsoRZlfnhg] [akXpb-zWRn6PFuC7iGRdiAACQhg] keep_alive=[1] [2026-07-02 11:30:39.210415] [R:akXpb-zWRn6PFuC7iGRdiAACQhg] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KH
...
show less
Email Spam
Hacking
๐ฌ๐ง
Wessex
2026-06-13 15:12:00
(1 month ago)
Botnet
Bad Web Bot
Exploited Host
๐ฎ๐ฉ
hermawan
2026-06-05 16:29:42
(1 month ago)
[Fri Jun 05 23:29:38.409469 2026] [security2:error] [pid 1134183:tid 140021494396608] [client 185.12 ...
show more
[Fri Jun 05 23:29:38.409469 2026] [security2:error] [pid 1134183:tid 140021494396608] [client 185.122.130.99:5270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "aiL5ciHugglHsTYXYDmq2AABFAs"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1134195] [d729KoRir3w] [aiL5ciHugglHsTYXYDmq2AABFAs] keep_alive
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-05-25 02:21:03
(2 months ago)
05/25/2026-09:21:02.996852 [Drop] [**] [1:3100005113:0] Suricata match TLS ja3 scan Uniq Zeek no 51 ...
show more
05/25/2026-09:21:02.996852 [Drop] [**] [1:3100005113:0] Suricata match TLS ja3 scan Uniq Zeek no 5113 with hash_1d9a054bac1eef41f30d370f9bbb2ad2 [**] [Classification: (null)] [Priority: 3] {TCP} 185.122.130.99:5982 -> 103.166.156.58:443
...
show less
Email Spam
Hacking
๐ซ๐ฎ
inlink.ltd
2026-05-13 15:02:09
(2 months ago)
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 185.122.130.99 was not ...
show more
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 185.122.130.99 was not IP who made PoW GET request earlier
show less
DDoS Attack
Exploited Host
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: