AbuseIPDB » 185.166.42.44
185.166.42.44
This IP was reported 5 times. Confidence of
Abuse
is 14% : ?
ISP
LinkWeb FiberZone B2B
Usage Type
Fixed Line ISP
ASN
AS207096
Domain Name
linkwebsolutions.com
Country
🇬🇧
United Kingdom of Great Britain and Northern Ireland
City
London, England
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.166.42.44 :
This IP address has been reported a total of
5
times from
2 distinct
sources.
185.166.42.44 was first reported on
May 19th 2026 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-20 04:20:18
(3 days ago)
[Sat Jun 20 11:20:12.884716 2026] [security2:error] [pid 28915:tid 140473815529152] [client 185.166. ...
show more
[Sat Jun 20 11:20:12.884716 2026] [security2:error] [pid 28915:tid 140473815529152] [client 185.166.42.44:65436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ajYU_D8hB4ScaZZ9RVK7bAABwQA"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[28932] [i6K7uWf2TKc] [ajYU_D8hB4ScaZZ9RVK7bAABwQA] keep_alive=[1] [2026-06-20 11:20:12.884722] [R:ajYU_D8hB4ScaZZ9RVK7bAABwQA] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/
...
show less
Email Spam
Hacking
🇸🇬
mypatricks
2026-06-16 20:34:01
(6 days ago)
185.166.42.44 | Port: 10279 | DNS: 185.166.42.44 2026-06-17T04:34:00+08:00 Europe/London | Bad Behav ...
show more
185.166.42.44 | Port: 10279 | DNS: 185.166.42.44 2026-06-17T04:34:00+08:00 Europe/London | Bad Behavior Activity | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/99.0.4844.47 Mobile/15E148 Safari/604.1 HTTP/1.1 443 GET | URL: /account-security-and-problem/ | Ref: - | Country: GB/United Kingdom/+00:00 IP City: London a0cc97bf3f89b685-OTP/Bucharest, Romania 1 hits/0 secs Robots 1
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇮🇩
hermawan
2026-06-12 02:16:01
(1 week ago)
[Fri Jun 12 09:15:56.783044 2026] [security2:error] [pid 2144107:tid 139767580694208] [client 185.16 ...
show more
[Fri Jun 12 09:15:56.783044 2026] [security2:error] [pid 2144107:tid 139767580694208] [client 185.166.42.44:48922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim"] [unique_id "aitr3EzAdLK6lEBSiMqwQAAAAU4"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2144148] [+AiODkWKDKs] [aitr3EzAdLK6lEBSiMqwQAAAAU4] keep_alive=[0] [2026-06-12 09:15:56.783050] [R:aitr3EzAdLK6lEBSiMqwQ
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-04 00:46:51
(2 weeks ago)
[Thu Jun 04 07:46:47.875726 2026] [authz_core:error] [pid 85804:tid 140067710432960] [client 185.166 ...
show more
[Thu Jun 04 07:46:47.875726 2026] [authz_core:error] [pid 85804:tid 140067710432960] [client 185.166.42.44:44056] AH01630: client denied by server configuration: /var/www/index.php, referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[85806] [9JEI4aI9kBg] [aiDK95vDCo0aPGFeFOLRLwAARwA] keep_alive=[1] [2026-06-04 07:46:47.875731] [R:aiDK95vDCo0aPGFeFOLRLwAARwA] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' Referer:'https://staklim-jatim.bmkg.go.id/ Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-19 20:27:26
(1 month ago)
[Wed May 20 03:27:22.118869 2026] [security2:error] [pid 245170:tid 140083100378816] [client 185.166 ...
show more
[Wed May 20 03:27:22.118869 2026] [security2:error] [pid 245170:tid 140083100378816] [client 185.166.42.44:41040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "624"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin"] [unique_id "agzHqi0pTX5321k96OddGwAAQgA"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[245175] [iwOfgTFC074] [agzHqi0pTX5321k96OddGwAAQgA] keep_alive=[1] [2026-05-20 03:27:22.118874] [R:agzHqi0pTX5321k96OddGwAAQgA] UA
...
show less
Email Spam
Hacking
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: