This IP address has been reported a total of
2
times from
2 distinct
sources.
142.147.233.138 was first reported on
October 3rd 2026 , and the most recent report was
2 days ago Indonesia
with 1
report;
Portugal
with 1
report.
The most common categories in these recent reports were:
Hacking
2
times;
Port Scan
1
time;
Bad Web Bot
1
time;
Spoofing
1
time;
Email Spam
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-10-17 02:55:42
(2 days ago)
[Sat Oct 17 09:55:41.417735 2026] [security2:error] [pid 65435:tid 140148601669312] [client 142.147. ...
show more
[Sat Oct 17 09:55:41.417735 2026] [security2:error] [pid 65435:tid 140148601669312] [client 142.147.233.138:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:referer: https://www.yahoo.go.id/ request_line = GET /index.php/component/search/?Itemid=435&format=opensearch HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/search/"] [unique_id "atLjrT4F4FFnrMsPtCtnPwAAAME"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[65466] [TdeUagBHvPQ] [atLjrT4F4FFnrMsPtCtnPwAAAME] keep_alive=[0] [2026-10-17 09:55:41.417741] [R:atLjrT4F4FFnrMsPtCtnPwAAAME] UA:'Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari
...
show less
Email Spam
Hacking
🇵🇹
Subnet Phantom Veil
2026-10-03 14:39:37
(2 weeks ago)
[CRITICAL][Security Alert: Bot Masquerading] Spoofed Google-InspectionTool User-Agent from unverifie ...
show more
[CRITICAL][Security Alert: Bot Masquerading] Spoofed Google-InspectionTool User-Agent from unverified ASN/IP. [IP Address]: 142.147.233.138 [User-Agent]: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.199 Mobile Safari/537.36 (compatible; Google-InspectionTool/1.0) [IoA Datetime]: 2026-10-03 15:39:37 UTC +1.
show less
Port Scan
Hacking
Spoofing
Bad Web Bot
Web App Attack
Showing 1 to
2
of 2 reports
