AbuseIPDB » 185.166.42.78
185.166.42.78
This IP was reported 6 times. Confidence of
Abuse
is 4% : ?
ISP
LinkWeb FiberZone B2B
Usage Type
Fixed Line ISP
ASN
AS207096
Domain Name
linkwebsolutions.com
Country
🇬🇧
United Kingdom of Great Britain and Northern Ireland
City
London, England
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.166.42.78 :
This IP address has been reported a total of
6
times from
1 distinct
source.
185.166.42.78 was first reported on
May 23rd 2026 , and the most recent report was
4 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-09 13:56:49
(4 hours ago)
[Tue Jun 09 20:56:45.523917 2026] [security2:error] [pid 37572:tid 139736564856512] [client 185.166. ...
show more
[Tue Jun 09 20:56:45.523917 2026] [security2:error] [pid 37572:tid 139736564856512] [client 185.166.42.78:5302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan"] [unique_id "aigbnXEL2iqcDxmxDjVIxQABhAk"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[37603] [sEVcf1KlExE] [aigbnXEL2iqcDxmxDjVIxQABhAk] keep_alive=[1] [2026-06-09 20:56:45.523922] [R:aigbnXEL2i
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-08 01:38:22
(1 day ago)
[Mon Jun 08 08:38:19.635364 2026] [security2:error] [pid 544016:tid 140380342298304] [client 185.166 ...
show more
[Mon Jun 08 08:38:19.635364 2026] [security2:error] [pid 544016:tid 140380342298304] [client 185.166.42.78:59524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /images/banners/Banner_Web_2024_Shelina-v3.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/banners/Banner_Web_2024_Shelina-v3.webp"] [unique_id "aiYdC4b-rNH3zLXk_wajtQAChgY"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[544028] [GMauEHQRGPE] [aiYdC4b-rNH3zLXk_wajtQAChgY] keep_alive=[1] [2026-06-08 08:38:19.635369] [R:aiYdC4b-rNH3zLXk_wajtQAChgY] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_4 like Mac OS X) AppleWebKit/605.1.15 (K
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-03 05:08:00
(6 days ago)
[Wed Jun 03 12:07:52.875709 2026] [security2:error] [pid 83813:tid 139880274282176] [client 185.166. ...
show more
[Wed Jun 03 12:07:52.875709 2026] [security2:error] [pid 83813:tid 139880274282176] [client 185.166.42.78:62806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /gtagku_staklim-jatim_bmkg_go_id-v1.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/gtagku_staklim-jatim_bmkg_go_id-v1.js"] [unique_id "ah-2qOQ13AACmIjxj6_hkAAAFA0"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[83839] [kQjmaNKgFYg] [ah-2qOQ13AACmIjxj6_hkAAAFA0] keep_alive=[1] [2026-06-03 12:07:52.875716] [R:ah-2qOQ13AACmIjxj6_hkAAAFA0] UA:'Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-31 15:44:49
(1 week ago)
[Sun May 31 22:44:44.462716 2026] [security2:error] [pid 1223648:tid 140573578094272] [client 185.16 ...
show more
[Sun May 31 22:44:44.462716 2026] [security2:error] [pid 1223648:tid 140573578094272] [client 185.166.42.78:16956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /disquss-v5.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/disquss-v5.js"] [unique_id "ahxXbHKtCEPTHl2mzidnUQAAywA"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1223649] [7pr29B4HRu4] [ahxXbHKtCEPTHl2mzidnUQAAywA] keep_alive=[1] [2026-05-31 22:44:44.462721] [R:ahxXbHKtCEPTHl2mzidnUQAAywA] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74' Host
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-28 09:35:46
(1 week ago)
[Thu May 28 16:35:40.216931 2026] [security2:error] [pid 588613:tid 139852206008000] [client 185.166 ...
show more
[Thu May 28 16:35:40.216931 2026] [security2:error] [pid 588613:tid 139852206008000] [client 185.166.42.78:28158] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin HTTP/2.0 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin Request Basename = infografis-bulanan-buletin"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-23 06:35:30
(2 weeks ago)
05/23/2026-13:35:25.883276 [Drop] [**] [1:2100001898:0] Suricata match TLS ja4 scan Uniq Zeek no 18 ...
show more
05/23/2026-13:35:25.883276 [Drop] [**] [1:2100001898:0] Suricata match TLS ja4 scan Uniq Zeek no 1898 with hash_t13d1812h1_85036bcba153_d41ae481755e [**] [Classification: (null)] [Priority: 3] {TCP} 185.166.42.78:3650 -> 103.166.156.58:443
...
show less
Email Spam
Hacking
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: