AbuseIPDB » 147.136.65.207
147.136.65.207
This IP was reported 7 times. Confidence of
Abuse
is 20% : ?
ISP
Darkness Reigns (Holding) B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
darkness-reigns.net
Country
🇿🇦
South Africa
City
Johannesburg, Gauteng
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 147.136.65.207 :
This IP address has been reported a total of
7
times from
3 distinct
sources.
147.136.65.207 was first reported on
May 10th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-17 07:29:00
(1 day ago)
[Wed Jun 17 14:28:55.728214 2026] [security2:error] [pid 1544599:tid 140703360345792] [client 147.13 ...
show more
[Wed Jun 17 14:28:55.728214 2026] [security2:error] [pid 1544599:tid 140703360345792] [client 147.136.65.207:35984] ModSecurity: Access denied with code 403 (phase 1). Match of "pm www.office.com powerpoint.officeapps.live.com /offline-service-worker-19-02-2025.js /offline-service-worker-27-01-2024-v5-0-1.js /offline-service-worker-01-08-2023-v4-5-1.js /OneSignalSDKWorker.js /worker-analytic-helper-27-11-2022.js/ /worker-analyti ..." against "REQUEST_HEADERS:Referer" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "580"] [id "440067"] [msg "BAD Referer"] [data "Matched Data: staklim-malang.info found within REQUEST_HEADERS:Referer: http://www.baidu.info/ request_line = GET /index.php/prakiraan-musim/296-prakiraan-musim-kemarau/prakiraan-sifat-hujan-musim-kemarau/prakiraan-sifat-hujan-musim-kemarau-di-malang HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-musim/296-prakiraan-musim-kemara
...
show less
Email Spam
Hacking
🇩🇪
HandyTreff.de
2026-06-16 02:13:13
(3 days ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -47.537 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -47.537 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 15_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Vers
show less
Web App Attack
Bad Web Bot
🇮🇩
hermawan
2026-06-15 17:23:27
(3 days ago)
[Tue Jun 16 00:23:24.519964 2026] [security2:error] [pid 77338:tid 139893117253312] [client 147.136. ...
show more
[Tue Jun 16 00:23:24.519964 2026] [security2:error] [pid 77338:tid 139893117253312] [client 147.136.65.207:19474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026"] [unique_id "ajA1DO74Pw_80TQ2c9pYFAAACwo"], referer http://www.baidu.go.i
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-13 19:04:01
(5 days ago)
[Sun Jun 14 02:03:56.614902 2026] [security2:error] [pid 1183640:tid 139664422774464] [client 147.13 ...
show more
[Sun Jun 14 02:03:56.614902 2026] [security2:error] [pid 1183640:tid 139664422774464] [client 147.136.65.207:53902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ai2pnK-ddEnYxrTAcQSQcgABWBQ"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1183661] [X8lKQad7d1U] [ai2pnK-ddEnYxrTAcQSQcgABWBQ] keep_alive=[1] [2026-06-14 02:03:56.614907] [R:ai2pnK-ddEnYxrTAcQSQcgABWBQ] UA:'Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 Edg/122.0.0.0' Host:'staklim-jatim.bmkg
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-06 01:04:02
(1 week ago)
[Sat Jun 06 08:04:02.424628 2026] [security2:error] [pid 1397849:tid 140021490226880] [client 147.13 ...
show more
[Sat Jun 06 08:04:02.424628 2026] [security2:error] [pid 1397849:tid 140021490226880] [client 147.136.65.207:20962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /disquss-v5.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/disquss-v5.js"] [unique_id "aiNyAodyKesBDMF6XneGbgAABgU"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1397855] [NcZOWktI5nM] [aiNyAodyKesBDMF6XneGbgAABgU] keep_alive=[1] [2026-06-06 08:04:02.424632] [R:aiNyAodyKesBDMF6XneGbgAABgU] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/139.0 Mobile/15E148 Safari/605.1.15
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-31 10:49:17
(2 weeks ago)
[Sun May 31 17:49:16.028905 2026] [security2:error] [pid 1058472:tid 140573627369152] [client 147.13 ...
show more
[Sun May 31 17:49:16.028905 2026] [security2:error] [pid 1058472:tid 140573627369152] [client 147.136.65.207:13612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [unique_id "ahwSLAprXv_kKvpuKWv8NQAAggA"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1058473] [8zBB1BrZ6v4] [ahwSLAprXv_kKvpuKWv8NQAAggA] keep_alive=[1] [2026-05-31 17:49:16.028909] [R:ahwSLAprXv_kKvpuKWv8NQAAggA] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 14
...
show less
Email Spam
Hacking
🇩🇪
Phenix Info
2026-05-10 05:47:33
(1 month ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: