AbuseIPDB » 147.136.65.251
147.136.65.251
This IP was reported 3 times. Confidence of
Abuse
is 13% : ?
ISP
Darkness Reigns (Holding) B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
darkness-reigns.net
Country
🇿🇦
South Africa
City
Johannesburg, Gauteng
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 147.136.65.251 :
This IP address has been reported a total of
3
times from
2 distinct
sources.
147.136.65.251 was first reported on
May 27th 2026 , and the most recent report was
4 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-05 19:52:25
(4 days ago)
[Sat Jun 06 02:52:20.737341 2026] [authz_core:error] [pid 1235624:tid 140021406283456] [client 147.1 ...
show more
[Sat Jun 06 02:52:20.737341 2026] [authz_core:error] [pid 1235624:tid 140021406283456] [client 147.136.65.251:34254] AH01630: client denied by server configuration: /var/www/index.php, referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1235645] [uT6p/4Z9IHg] [aiMo9AqW_h_lQRYgLwgGkwABjBM] keep_alive=[1] [2026-06-06 02:52:20.737345] [R:aiMo9AqW_h_lQRYgLwgGkwABjBM] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' Referer:'https://staklim-jatim.bmkg.go.id/ Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8
...
show less
Email Spam
Hacking
🇩🇪
Phenix Info
2026-06-02 01:22:14
(1 week ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇮🇩
hermawan
2026-05-27 04:17:07
(1 week ago)
[Wed May 27 11:17:03.541759 2026] [security2:error] [pid 489924:tid 139875701618368] [client 147.136 ...
show more
[Wed May 27 11:17:03.541759 2026] [security2:error] [pid 489924:tid 139875701618368] [client 147.136.65.251:52134] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php HTTP/2.0 Request URI RAW = /index.php Request Basename = index.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ahZwP3ZrzCxBLdx5eXb_SgAAEA
...
show less
Email Spam
Hacking
Showing 1 to
3
of 3 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: