AbuseIPDB » 147.136.65.230
147.136.65.230 was found in our database!
This IP was reported 5 times. Confidence of
Abuse
is 4% : ?
ISP
Darkness Reigns (Holding) B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
darkness-reigns.net
Country
๐ฟ๐ฆ
South Africa
City
Johannesburg, Gauteng
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 147.136.65.230 :
This IP address has been reported a total of
5
times from
1 distinct
source.
147.136.65.230 was first reported on
May 8th 2026 , and the most recent report was
14 hours ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฎ๐ฉ
hermawan
2026-06-26 11:23:50
(14 hours ago)
[Fri Jun 26 18:23:43.086995 2026] [security2:error] [pid 87732:tid 139695326398144] [client 147.136. ...
show more
[Fri Jun 26 18:23:43.086995 2026] [security2:error] [pid 87732:tid 139695326398144] [client 147.136.65.230:3986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "aj5hP9EPL15m1TRR5Gdv7gABwxc"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[87756] [9HxUV2Zz5Ho] [aj5hP9EPL15m1TRR5Gdv7gABwxc] keep_alive=[1] [2026-06-26 18:23:43.087000] [R:aj5hP9EPL15m1TRR5Gdv7gABwxc] UA:'Mozilla/5.0 (Linux;
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-06-10 19:18:52
(2 weeks ago)
[Thu Jun 11 02:18:48.795584 2026] [security2:error] [pid 773968:tid 139786244220608] [client 147.136 ...
show more
[Thu Jun 11 02:18:48.795584 2026] [security2:error] [pid 773968:tid 139786244220608] [client 147.136.65.230:36516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "aim4mOh9UyV1K1epeLPh1AAAQhg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[773993] [dyTyHCviy6I] [aim4mOh9UyV1K1epeLPh1AAAQhg] keep_alive=[1] [2026-06-11 02:18:48.795589] [R:aim4mOh9UyV1K1epeLPh1AAAQhg] U
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-06-09 15:25:05
(2 weeks ago)
[Tue Jun 09 22:25:04.336302 2026] [security2:error] [pid 90737:tid 139736577451712] [client 147.136. ...
show more
[Tue Jun 09 22:25:04.336302 2026] [security2:error] [pid 90737:tid 139736577451712] [client 147.136.65.230:39344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "aigwULP-CDzFBAWd5tSJDwABUwU"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[90750] [yH4uu1PE7As] [aigwULP-CDzFBAWd5tSJDwABUwU] keep_alive=[1] [2026-06-09 22:25:04.336305] [R:aigwULP-CDzFBAWd5tSJDwABUwU] UA:'Mozilla/5.0 (Linu
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-05-25 07:43:31
(1 month ago)
[Mon May 25 14:43:26.388903 2026] [security2:error] [pid 836595:tid 140518584473280] [client 147.136 ...
show more
[Mon May 25 14:43:26.388903 2026] [security2:error] [pid 836595:tid 140518584473280] [client 147.136.65.230:38342] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "857"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php HTTP/2.0 Request URI RAW = /index.php Request Basename = index.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ahP9nuj689Jz18YcW8M61QABxg
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-05-08 06:30:52
(1 month ago)
[Fri May 08 13:09:33.481811 2026] [security2:error] [pid 126369:tid 140127127983808] [client 147.136 ...
show more
[Fri May 08 13:09:33.481811 2026] [security2:error] [pid 126369:tid 140127127983808] [client 147.136.65.230:6552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "623"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /images/Klimatologi/Sertifikasi/BS_EN_ISO_9001_2015/PEFC-150.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Sertifikasi/BS_EN_ISO_9001_2015/PEFC-150.webp"] [unique_id "af1-HazHa-X7SWvUBrCbCgAABAM"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[126398] [DfWVPYiCLvc] [af1-HazHa-X7SWvUBrCbCgAABAM] keep_alive=[1] [2026-05-08 13:09:33.481815] [R:af1-HazHa-X7SWvUBrCbCgAABAM] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like M
...
show less
Email Spam
Hacking
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: