AbuseIPDB » 147.136.67.64
147.136.67.64
This IP was reported 5 times. Confidence of
Abuse
is 18% : ?
ISP
Darkness Reigns (Holding) B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
darkness-reigns.net
Country
🇿🇦
South Africa
City
Johannesburg, Gauteng
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 147.136.67.64 :
This IP address has been reported a total of
5
times from
3 distinct
sources.
147.136.67.64 was first reported on
May 2nd 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-12 18:05:30
(1 day ago)
[Sat Jun 13 01:05:26.264543 2026] [security2:error] [pid 214539:tid 140091858077376] [client 147.136 ...
show more
[Sat Jun 13 01:05:26.264543 2026] [security2:error] [pid 214539:tid 140091858077376] [client 147.136.67.64:19084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan"] [unique_id "aixKZsK6Ea44CSDq0KlMCwABCQI"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[214542] [dQA3UpIsWso] [aixKZsK6Ea44CSDq0KlMCwABCQI] keep_alive=[1] [2026-06-13 01:05:26.264556] [R:aixKZ
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-04 14:44:14
(1 week ago)
[Thu Jun 04 21:44:10.643097 2026] [security2:error] [pid 293170:tid 139764381419200] [client 147.136 ...
show more
[Thu Jun 04 21:44:10.643097 2026] [security2:error] [pid 293170:tid 139764381419200] [client 147.136.67.64:51112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "aiGPOtvXcvDDE2UTweKCgAAAAhg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[293195] [uH25k64QZ5E] [aiGPOtvXcvDDE2UTweKCgAAAAhg] keep_alive=[1] [2026-06-04 21:44:10.643102] [R:aiGPOtvXcvDDE2UTweKCgAAAAhg] UA:'Mozilla/5.0 (iPhon
...
show less
Email Spam
Hacking
🇫🇮
inlink.ltd
2026-05-26 19:26:24
(2 weeks ago)
WAF PoW failure, possible botnet behavior, IP mismatch, GET request made by 147.136.67.64 was not IP ...
show more
WAF PoW failure, possible botnet behavior, IP mismatch, GET request made by 147.136.67.64 was not IP who made PoW POST request later
show less
DDoS Attack
Exploited Host
🇮🇩
hermawan
2026-05-08 06:12:37
(1 month ago)
[Fri May 08 12:53:42.095396 2026] [security2:error] [pid 113959:tid 140125304510144] [client 147.136 ...
show more
[Fri May 08 12:53:42.095396 2026] [security2:error] [pid 113959:tid 140125304510144] [client 147.136.67.64:3596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "295"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 14; SM-A135F Build/UP1A.231005.007; ) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/139.0.7258.158 Mobile Safari/537.36 BingSapphire/32.3.430811005 request_line = GET /swiper-v112.js HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/swiper-v112.js"] [unique_id "af16ZgufZrbynyrVz9vffgAAANc"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[114035] [tlbZBMjxJfs] [af16ZgufZrbynyrVz9vffgAAANc] keep_alive=[0] [2026-05-08 12:53:42.095400] [R:a
...
show less
Email Spam
Hacking
🇺🇸
MPL
2026-05-02 06:43:11
(1 month ago)
tcp/443 (4 or more attempts)
Port Scan
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: