AbuseIPDB » 147.136.67.34
147.136.67.34
This IP was reported 6 times. Confidence of
Abuse
is 11% : ?
ISP
Darkness Reigns (Holding) B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
darkness-reigns.net
Country
🇿🇦
South Africa
City
Johannesburg, Gauteng
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 147.136.67.34 :
This IP address has been reported a total of
6
times from
3 distinct
sources.
147.136.67.34 was first reported on
April 24th 2026 , and the most recent report was
4 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-22 12:05:51
(4 days ago)
[Mon Jun 22 19:05:50.475702 2026] [security2:error] [pid 530232:tid 140214527219392] [client 147.136 ...
show more
[Mon Jun 22 19:05:50.475702 2026] [security2:error] [pid 530232:tid 140214527219392] [client 147.136.67.34:44714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ajklHskH2huKbDJb0W6KOgAF1xY"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[530255] [+5ebdhaq33E] [ajklHskH2huKbDJb0W6KOgAF1xY] keep_alive=[1] [2026-06-22 19:05:50.475710] [R:ajklHskH2huKbDJb0W6KOgAF1xY] UA:'Mozilla/5.0 (Linux; Android 12; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/h
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-20 20:40:33
(6 days ago)
[Sun Jun 21 03:40:33.020695 2026] [security2:error] [pid 534447:tid 140110945208000] [client 147.136 ...
show more
[Sun Jun 21 03:40:33.020695 2026] [security2:error] [pid 534447:tid 140110945208000] [client 147.136.67.34:10566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026"] [unique_id "ajb6wRFgkhu1ixrq2FYOUAACQRg"], referer http://www.baidu.go.i
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-14 17:07:53
(1 week ago)
[Mon Jun 15 00:07:49.292698 2026] [security2:error] [pid 269837:tid 139672991803072] [client 147.136 ...
show more
[Mon Jun 15 00:07:49.292698 2026] [security2:error] [pid 269837:tid 139672991803072] [client 147.136.67.34:8700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "ai7f5Sm8B9JAQ-Yxo7bfRQAAxQQ"], referer https://www.bmkg.go.id/ [s
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-09 20:36:16
(2 weeks ago)
[Wed Jun 10 03:36:12.198792 2026] [security2:error] [pid 283590:tid 139736562779840] [client 147.136 ...
show more
[Wed Jun 10 03:36:12.198792 2026] [security2:error] [pid 283590:tid 139736562779840] [client 147.136.67.34:47384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aih5PByHfIy3kIugrJVrRAAATAI"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[283619] [XoXfE5ihxBU] [aih5PByHfIy3kIugrJVrRAAATAI] keep_alive=[1] [2026-06-10 03:36:12.198796] [R:aih5PByHfIy3kIugrJVrRAAATAI] UA:'Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581' Host:'staklim-jatim.bmkg
...
show less
Email Spam
Hacking
🇫🇮
inlink.ltd
2026-05-19 14:23:19
(1 month ago)
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 147.136.67.34 was not I ...
show more
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 147.136.67.34 was not IP who made PoW GET request earlier
show less
DDoS Attack
Exploited Host
🇺🇸
MPL
2026-04-24 22:47:19
(2 months ago)
tcp/443 (4 or more attempts)
Port Scan
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: