AbuseIPDB » 147.136.66.34
147.136.66.34
This IP was reported 7 times. Confidence of
Abuse
is 4% : ?
ISP
Darkness Reigns (Holding) B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
darkness-reigns.net
Country
🇿🇦
South Africa
City
Johannesburg, Gauteng
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 147.136.66.34 :
This IP address has been reported a total of
7
times from
3 distinct
sources.
147.136.66.34 was first reported on
April 27th 2026 , and the most recent report was
18 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-10-22 09:55:19
(18 hours ago)
[Thu Oct 22 16:55:18.752255 2026] [security2:error] [pid 93687:tid 139901278336704] [client 147.136. ...
show more
[Thu Oct 22 16:55:18.752255 2026] [security2:error] [pid 93687:tid 139901278336704] [client 147.136.66.34:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "atndhhu9JJWJIqtBk4lBkgAAAQc"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[93768] [nld53OpKhWw] [atndhhu9JJWJIqtBk4lBkgAAAQc] keep_alive=[0] [2026-10-22 16:55:18.752262] [R:atndhhu9JJWJIqtBk4lBkgAAAQc] UA:'Mozilla/5.0 (Linux; Android 10; Pixel 7 Pro Build/QP1A.190711.020) AppleWebKit/597.5 (KHTML, like Gecko) Firefox/103.0.3195.108 Mobile Safari/597.16' Host:'stakli
...
show less
Email Spam
Hacking
2026-08-07 20:02:03
(2 months ago)
Web attack
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-06-28 02:13:29
(3 months ago)
[Sun Jun 28 09:13:26.548119 2026] [security2:error] [pid 541359:tid 139761539770048] [client 147.136 ...
show more
[Sun Jun 28 09:13:26.548119 2026] [security2:error] [pid 541359:tid 139761539770048] [client 147.136.66.34:38712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin"] [unique_id "akCDRkcG3wQuBwkxMr61UQABDBg"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[541384] [WiES48a+Dv0] [akCDRkcG3wQuBwkxMr61UQABDBg] keep_alive=[1] [2026-06-28 09:13:26.548124] [R:akCDRkcG3wQuBwkxMr61UQABDBg]
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-08 08:46:43
(4 months ago)
[Mon Jun 08 15:46:40.667810 2026] [security2:error] [pid 884524:tid 140661991827136] [client 147.136 ...
show more
[Mon Jun 08 15:46:40.667810 2026] [security2:error] [pid 884524:tid 140661991827136] [client 147.136.66.34:20376] ModSecurity: Access denied with code 403 (phase 1). Match of "pm www.office.com powerpoint.officeapps.live.com /offline-service-worker-19-02-2025.js /offline-service-worker-27-01-2024-v5-0-1.js /offline-service-worker-01-08-2023-v4-5-1.js /OneSignalSDKWorker.js /worker-analytic-helper-27-11-2022.js/ /worker-analyti ..." against "REQUEST_HEADERS:Referer" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "580"] [id "440067"] [msg "BAD Referer"] [data "Matched Data: matomo.staklim-malang.info found within REQUEST_HEADERS:Referer: https://www.yandex.info/ request_line = GET /matomo.php?idsite=1&rec=1&cookie=1 HTTP/2.0"] [severity "NOTICE"] [hostname "matomo.staklim-malang.info"] [uri "/matomo.php"] [unique_id "aiaBcIchLruWMfgS8OEDHQACDRg"], referer https://www.yandex.info/ [matomo.staklim-malang.info] [matomo.staklim-malan
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-04 17:11:31
(5 months ago)
[Mon May 04 23:31:03.992229 2026] [security2:error] [pid 58391:tid 140314215962304] [client 147.136. ...
show more
[Mon May 04 23:31:03.992229 2026] [security2:error] [pid 58391:tid 140314215962304] [client 147.136.66.34:13036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "623"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "afjJx_PSZCPN7hJ4HAsFqAAAAAk"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[58427] [9BHqdABSIrE] [afjJx_PSZCPN7hJ4HAsFqAAAAAk] keep_alive=[0] [2026-05-04 23:31:03.992233] [R:afjJx_PSZCPN7hJ4HAsFqAAAA
...
show less
Email Spam
Hacking
🇺🇸
MPL
2026-04-27 18:58:30
(5 months ago)
tcp/443 (4 or more attempts)
Port Scan
🇺🇸
MPL
2026-04-27 18:58:30
(5 months ago)
tcp/443 (8 or more attempts)
Port Scan
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: