AbuseIPDB » 147.136.66.71
147.136.66.71
This IP was reported 5 times. Confidence of
Abuse
is 20% : ?
ISP
Darkness Reigns (Holding) B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
darkness-reigns.net
Country
🇿🇦
South Africa
City
Johannesburg, Gauteng
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 147.136.66.71 :
This IP address has been reported a total of
5
times from
3 distinct
sources.
147.136.66.71 was first reported on
March 25th 2026 , and the most recent report was
19 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-16 23:21:24
(19 hours ago)
[Wed Jun 17 06:21:20.990171 2026] [security2:error] [pid 1249379:tid 139771241244352] [client 147.13 ...
show more
[Wed Jun 17 06:21:20.990171 2026] [security2:error] [pid 1249379:tid 139771241244352] [client 147.136.66.71:48038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas"] [unique_id "ajHacKUVrgtpK45GzzoFVgAAQww"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1249392] [cVpfM+eQyD4] [ajHacKUVrgtpK45GzzoFVgAAQww] keep_ali
...
show less
Email Spam
Hacking
2026-06-16 18:27:00
(1 day ago)
Multiple Violations by Bot
Port Scan
Web App Attack
🇮🇩
hermawan
2026-06-10 01:20:44
(1 week ago)
[Wed Jun 10 08:20:44.195891 2026] [security2:error] [pid 9005:tid 140281669129920] [client 147.136.6 ...
show more
[Wed Jun 10 08:20:44.195891 2026] [security2:error] [pid 9005:tid 140281669129920] [client 147.136.66.71:18366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aii77OTCoAQbr5eKwWpreQAARhg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[9033] [gJVxDRycLwU] [aii77OTCoAQbr5eKwWpreQAARhg] keep_alive=[1] [2026-06-10 08:20:44.195894] [R:aii77OTCoAQbr5eKwWpreQAARhg] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/122.0.2365.99 Version/17.0 Mobile/15E148 Safari/604.1' Ho
...
show less
Email Spam
Hacking
🇫🇮
inlink.ltd
2026-05-21 07:12:07
(3 weeks ago)
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 147.136.66.71 was not I ...
show more
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 147.136.66.71 was not IP who made PoW GET request earlier
show less
DDoS Attack
Exploited Host
🇮🇩
hermawan
2026-03-25 01:44:03
(2 months ago)
1774403036.116103 CTqb3edXUXHUy6tV9 147.136.66.71 19282 103.166.156.58 443 tcp - 3.023460 0 0 S0 F F ...
show more
1774403036.116103 CTqb3edXUXHUy6tV9 147.136.66.71 19282 103.166.156.58 443 tcp - 3.023460 0 0 S0 F F 0 S 3 180 0 0 - 6 887201518561554_54 (empty) 64240_2-4-8-1-3_1460_7 (empty) 03/25/2026-08:43:56.116103
...
show less
Email Spam
Hacking
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: