JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 147.136.66.109

147.136.66.109 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 14%: ?

14%

ISP	Darkness Reigns (Holding) B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	darkness-reigns.net
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 147.136.66.109

Whois 147.136.66.109

IP Abuse Reports for 147.136.66.109:

This IP address has been reported a total of 5 times from 2 distinct sources. 147.136.66.109 was first reported on April 12th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-12 03:52:19 (3 hours ago)	[Fri Jun 12 10:52:18.597550 2026] [security2:error] [pid 2192575:tid 139768403838656] [client 147.13 ... show more [Fri Jun 12 10:52:18.597550 2026] [security2:error] [pid 2192575:tid 139768403838656] [client 147.136.66.109:54102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "aiuCckJasHIQFLx1RbtwPgAATwI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2192578] [RawxZ0YuRbI] [aiuCckJasHIQFLx1RbtwPgAATwI] keep_alive=[1] [2026-06-12 10:52:18.597558] [R:aiuCckJasHIQFLx1 ... show less	Email Spam Hacking
🇩🇪 HandyTreff.de	2026-06-02 17:40:28 (1 week ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -26.371 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -26.371 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.626 show less	Web App Attack Bad Web Bot
🇮🇩 hermawan	2026-05-29 00:49:58 (2 weeks ago)	[Fri May 29 07:49:53.992159 2026] [security2:error] [pid 1168335:tid 139852021425856] [client 147.13 ... show more [Fri May 29 07:49:53.992159 2026] [security2:error] [pid 1168335:tid 139852021425856] [client 147.136.66.109:62570] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/2.0 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-tahunan Request Basename = infografis-tahunan"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "ca ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-17 06:19:48 (3 weeks ago)	05/17/2026-04:43:29.294139 [Drop] [] [1:2100000462:0] Suricata match TLS JA4 scan Uniq Zeek no 46 ... show more 05/17/2026-04:43:29.294139 [Drop] [] [1:2100000462:0] Suricata match TLS JA4 scan Uniq Zeek no 462 with hash_t12d1516h2_8daaf6152771_ea2cbcd64924 [**] [Classification: (null)] [Priority: 3] {TCP} 147.136.66.109:20058 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-04-12 19:24:18 (1 month ago)	[Mon Apr 13 02:22:29.584923 2026] [authz_core:error] [pid 186260:tid 140703448344256] [client 147.13 ... show more [Mon Apr 13 02:22:29.584923 2026] [authz_core:error] [pid 186260:tid 140703448344256] [client 147.136.66.109:5446] AH01630: client denied by server configuration: /var/matomo/index.php, referer https://mail.staklim-malang.info/ [matomo.staklim-malang.info] [matomo.staklim-malang.info] top=[186334] [xkp1ScipIS0] [advw9WbItgAbzd0eiHuWSAAAQxg] keep_alive=[1] [2026-04-13 02:22:29.585107] [R:advw9WbItgAbzd0eiHuWSAAAQxg] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36' Host:'mail.staklim-malang.info' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7' Referer:'https://mail.staklim-malang.info/ Accept-Encoding:'gzip, deflate, br, zstd Accept-Language:'en-US,en;q=0.8 Upgrade-Insecure-Requests:'1 ... show less	Email Spam Hacking

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.98.62.211

🇳🇱 176.65.139.218

🇭🇰 122.10.115.18

🇩🇪 69.5.169.225

🇺🇸 20.65.193.130

🇦🇷 179.43.115.6

🇺🇸 147.185.132.100

🇹🇷 89.252.131.17

🇺🇸 66.132.224.21

🇬🇧 51.77.110.3

🇧🇷 45.205.1.241

🇺🇸 34.44.83.103

🇺🇸 24.31.216.199

🇺🇸 216.25.89.109

🇺🇸 192.81.210.77

🇳🇱 185.242.226.104

🇳🇱 185.107.80.93

🇺🇸 151.243.237.13

🇮🇩 124.40.252.3

🇧🇪 34.14.23.32