JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

147.136.65.170

Recent Activity

Abuse confidence score ?

3% Caution

10 reports

2 reporters · latest 5 days ago

ISP	Darkness Reigns (Holding) B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	darkness-reigns.net
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 147.136.65.170

Export CSV

This IP address has been reported a total of 10 times from 2 distinct sources. 147.136.65.170 was first reported on April 24th 2026, and the most recent report was 5 days ago. In the last 60 days, the only reporter location was: Indonesia with 1 report. The most common categories in these recent reports were: Hacking 1 time; Email Spam 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-10-20 00:17:42 (5 days ago)	Captured JA4H: ge11n_133fd66ef233 \| Log: 147.136.65.170 - - [20/Oct/2026:07:17:38 +0700] "GET /index ... show more Captured JA4H: ge11n_133fd66ef233 \| Log: 147.136.65.170 - - [20/Oct/2026:07:17:38 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/perbandingan-prakiraan-awal-musim-kemarau-dengan-rata-ratanya HTTP/1.1" 200 30459 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6394.145 Safari/537.36 OPR/86.0.3523.22" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,save-data,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-30 20:57:50 (3 months ago)	[Wed Jul 01 03:57:49.303662 2026] [security2:error] [pid 379784:tid 140186869483200] [client 147.136 ... show more [Wed Jul 01 03:57:49.303662 2026] [security2:error] [pid 379784:tid 140186869483200] [client 147.136.65.170:4842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "akQtzSc9cYM5hwqyyrcJ_gAAThI"], referer https://www.bing.go.id/ [ ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-21 03:54:30 (4 months ago)	[Sun Jun 21 10:54:25.581827 2026] [security2:error] [pid 959509:tid 140110560388800] [client 147.136 ... show more [Sun Jun 21 10:54:25.581827 2026] [security2:error] [pid 959509:tid 140110560388800] [client 147.136.65.170:61210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "ajdgcRU-Wamqbx2RTkM2agADAhg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[959534] [A6hQe3vQvVc] [ajdgcRU-Wamqbx2RTkM2agADAhg] keep_alive=[1] [2026-06-21 10 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-18 18:33:16 (4 months ago)	[Fri Jun 19 01:33:11.789381 2026] [security2:error] [pid 728283:tid 140711126083264] [client 147.136 ... show more [Fri Jun 19 01:33:11.789381 2026] [security2:error] [pid 728283:tid 140711126083264] [client 147.136.65.170:17802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ajQ55-_z9QDkyXRsuDB0NAAAAwU"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[728289] [VsWJaAtt4fw] [ajQ55-_z9QDkyXRsuDB0NAAAAwU] keep_alive=[1] [2026-06-19 01:33:11.789389] [R:ajQ55-_z9QDkyXRsuDB0NAAAAwU] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/26.0 Chrome/122.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:' ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-15 11:34:37 (4 months ago)	[Mon Jun 15 18:34:32.654538 2026] [security2:error] [pid 138957:tid 140170994116288] [client 147.136 ... show more [Mon Jun 15 18:34:32.654538 2026] [security2:error] [pid 138957:tid 140170994116288] [client 147.136.65.170:64556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ai_jSHkdOO-DPjXqlfbg9QAAGAE"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[138959] [6CPMNck+lDI] [ai_jSHkdOO-DPjXqlfbg9QAAGAE] keep_alive=[1] [2026-06-15 18:34:32.654552] [R:ai_jSHkdOO-DPjXqlfbg9QAAGAE] UA:'Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581' ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-29 09:37:16 (4 months ago)	[Fri May 29 16:37:13.037684 2026] [security2:error] [pid 1494366:tid 139851920750272] [client 147.13 ... show more [Fri May 29 16:37:13.037684 2026] [security2:error] [pid 1494366:tid 139851920750272] [client 147.136.65.170:62322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /images/gempa/webp/20260529132521.mmi.jpg.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/gempa/webp/20260529132521.mmi.jpg.webp"] [unique_id "ahleSZ_LCDhAsGbAG34jRwABTxM"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1494387] [p57mlrHpSuo] [ahleSZ_LCDhAsGbAG34jRwABTxM] keep_alive=[1] [2026-05-29 16:37:13.037689] [R:ahleSZ_LCDhAsGbAG34jRwABTxM] UA:'Mozilla/5.0 (Android 13; Mobile; rv:129.0) Gecko/129.0 Firefox/129.0' Host:'stakl ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-19 21:18:48 (5 months ago)	[Wed May 20 04:18:46.833213 2026] [security2:error] [pid 268698:tid 140083058415296] [client 147.136 ... show more [Wed May 20 04:18:46.833213 2026] [security2:error] [pid 268698:tid 140083058415296] [client 147.136.65.170:49004] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "857"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php HTTP/2.0 Request URI RAW = /index.php Request Basename = index.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "agzTtjAT1QDbCiTb2dBkhQABWA ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-13 23:09:14 (5 months ago)	[Thu May 14 05:37:30.022532 2026] [security2:error] [pid 72952:tid 139838146647744] [client 147.136. ... show more [Thu May 14 05:37:30.022532 2026] [security2:error] [pid 72952:tid 139838146647744] [client 147.136.65.170:61584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "624"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan"] [unique_id "agT9KilS_khcskzHq1T3ZQAAwRg"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[73001] [04rzn7o7db4] [agT9KilS_khcskzHq1T3ZQAAwRg] keep_alive=[1] [2026-05-14 05:37:30.022539] [R:agT9KilS_khcskzHq1T3ZQAAwRg] UA:'Mozilla/5.0 (Linux; Andro ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-02 13:33:26 (5 months ago)	[Sat May 02 19:27:05.482174 2026] [security2:error] [pid 138429:tid 139640904337088] [client 147.136 ... show more [Sat May 02 19:27:05.482174 2026] [security2:error] [pid 138429:tid 139640904337088] [client 147.136.65.170:19870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "295"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 13; SM-A032M Build/TP1A.220624.014; ) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/139.0.7258.160 Mobile Safari/537.36 BingSapphire/32.3.430811005 request_line = GET /matomo-parti-samesite-29-01-2026-5-7-0.js HTTP/1.1"] [severity "NOTICE"] [hostname "matomo.staklim-malang.info"] [uri "/matomo-parti-samesite-29-01-2026-5-7-0.js"] [unique_id "afXtmUEyYnq_sGSmgCu97AAAAAc"], referer https://www.bing.info/ [matomo.staklim-malang.info] [matomo.staklim-malang.info] top=[138463] [5HK10FSedOA] [afXtmUEyYnq_sGSmgCu97AAAAA ... show less	Email Spam Hacking
🇺🇸 MPL	2026-04-24 23:06:27 (6 months ago)	tcp/443 (8 or more attempts)	Port Scan

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.144

🇺🇸 98.122.215.23

🇮🇶 37.237.136.39

🇰🇼 37.231.157.255

🇦🇿 37.114.150.164

🇩🇪 34.32.124.197

🇺🇸 20.65.170.52

🇺🇸 20.14.94.44

🇺🇸 209.87.169.82

🇩🇪 196.251.121.128

🇺🇸 170.106.142.71

🇩🇪 130.12.180.163

🇮🇩 125.164.189.73

🇧🇩 103.96.105.217

🇫🇷 51.91.96.79

🇸🇪 46.59.109.199

🇻🇪 38.52.142.183

🇧🇾 37.215.42.34

🇧🇾 37.214.5.253

🇸🇬 188.166.185.166