AbuseIPDB » 185.166.43.80
185.166.43.80
This IP was reported 3 times. Confidence of
Abuse
is 12% : ?
ISP
LinkWeb FiberZone B2B
Usage Type
Fixed Line ISP
ASN
AS207096
Domain Name
linkwebsolutions.com
Country
🇬🇧
United Kingdom of Great Britain and Northern Ireland
City
London, England
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.166.43.80 :
This IP address has been reported a total of
3
times from
2 distinct
sources.
185.166.43.80 was first reported on
May 18th 2026 , and the most recent report was
21 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-13 03:52:23
(21 hours ago)
[Sat Jun 13 10:52:20.503204 2026] [security2:error] [pid 581517:tid 140091740239552] [client 185.166 ...
show more
[Sat Jun 13 10:52:20.503204 2026] [security2:error] [pid 581517:tid 140091740239552] [client 185.166.43.80:44570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "aizT9PVa6_c8du2LL9tPngABAgc"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[581525] [pVEphRort8k] [aizT9PVa6_c8du2LL9tPngABAgc] keep_alive=[1] [2026-06-13 10:52:20.503208] [R:aizT9PVa6_c8du2LL9tPngABAgc
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-27 04:18:34
(2 weeks ago)
[Wed May 27 11:18:29.658875 2026] [security2:error] [pid 491266:tid 139875706721984] [client 185.166 ...
show more
[Wed May 27 11:18:29.658875 2026] [security2:error] [pid 491266:tid 139875706721984] [client 185.166.43.80:30194] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php HTTP/2.0 Request URI RAW = /index.php Request Basename = index.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ahZwlRrHSSkGvVUGs4smGAAByAE
...
show less
Email Spam
Hacking
🇫🇮
inlink.ltd
2026-05-18 16:08:35
(3 weeks ago)
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 185.166.43.80 was not I ...
show more
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 185.166.43.80 was not IP who made PoW GET request earlier
show less
DDoS Attack
Exploited Host
Showing 1 to
3
of 3 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: