AbuseIPDB » 147.136.66.130
147.136.66.130
This IP was reported 6 times. Confidence of
Abuse
is 12% : ?
ISP
Darkness Reigns (Holding) B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
darkness-reigns.net
Country
🇿🇦
South Africa
City
Johannesburg, Gauteng
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 147.136.66.130 :
This IP address has been reported a total of
6
times from
2 distinct
sources.
147.136.66.130 was first reported on
April 12th 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-05 14:29:59
(2 days ago)
[Fri Jun 05 21:29:56.919391 2026] [security2:error] [pid 1065012:tid 140021462918848] [client 147.13 ...
show more
[Fri Jun 05 21:29:56.919391 2026] [security2:error] [pid 1065012:tid 140021462918848] [client 147.136.66.130:63264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan"] [unique_id "aiLdZMwPFDNtWqkc0b0h4wABShA"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1065029] [u/+tfoJjvHo] [aiLdZMwPFDNtWqkc0b0h4wABShA] keep_alive=[1] [2026-06-05 21:29:56.919396] [R:aiLdZMwPFDNtWqkc0b0h4wABShA] UA:'Mozilla/5.0 (Linux; And
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-28 08:06:25
(1 week ago)
[Thu May 28 15:06:21.007827 2026] [security2:error] [pid 541346:tid 139852237477568] [client 147.136 ...
show more
[Thu May 28 15:06:21.007827 2026] [security2:error] [pid 541346:tid 139852237477568] [client 147.136.66.130:13474] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /script-v188.js HTTP/2.0 Request URI RAW = /script-v188.js Request Basename = script-v188.js"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/script-v188.js"] [unique_id "ahf3fa
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-24 10:22:39
(2 weeks ago)
05/24/2026-17:22:36.893854 [Drop] [**] [1:2100001845:0] Suricata match TLS ja4 scan Uniq Zeek no 18 ...
show more
05/24/2026-17:22:36.893854 [Drop] [**] [1:2100001845:0] Suricata match TLS ja4 scan Uniq Zeek no 1845 with hash_t13d1517h2_8daaf6152771_5f478fd0dbfa [**] [Classification: (null)] [Priority: 3] {TCP} 147.136.66.130:32394 -> 103.166.156.58:443
...
show less
Email Spam
Hacking
🇺🇸
MPL
2026-04-28 10:27:05
(1 month ago)
tcp/443 (8 or more attempts)
Port Scan
🇺🇸
MPL
2026-04-19 09:21:19
(1 month ago)
tcp/443 (8 or more attempts)
Port Scan
🇺🇸
MPL
2026-04-12 10:51:36
(1 month ago)
tcp/443 (4 or more attempts)
Port Scan
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: