๐ฎ๐ฉ
hermawan
2026-06-29 13:08:41
(2 months ago)
[Mon Jun 29 20:08:36.831902 2026] [security2:error] [pid 1426797:tid 139910304495296] [client 168.23 ...
show more
[Mon Jun 29 20:08:36.831902 2026] [security2:error] [pid 1426797:tid 139910304495296] [client 168.235.203.247:12096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "444"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "akJuVKWS_N4H3rBm2kV-CwAABJE"], referer https://www.google.co.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1426841] [0qj/J2QeaPI] [akJuVKWS_N4H3rBm2kV-CwAABJE] keep_alive=[0] [2026-06-29 20:08:36.831911] [R:akJuVKWS_N4H3rBm2kV-CwAA
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-05-30 05:46:37
(3 months ago)
[Sat May 30 12:46:32.912630 2026] [security2:error] [pid 129559:tid 140573586384576] [client 168.235 ...
show more
[Sat May 30 12:46:32.912630 2026] [security2:error] [pid 129559:tid 140573586384576] [client 168.235.203.247:29970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "425"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-prediksi-sifat-hujan-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-prediksi-sifat-hujan-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur"] [unique_id "ahp5uIdtgdubDn1Snoe1hwAAAIA"], referer https://www.google.co.id/ [staklim
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
sockominfo
2026-04-20 18:00:14
(4 months ago)
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Repo ...
show more
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ช๐ธ
liewebs
2026-04-16 13:32:17
(4 months ago)
SYN Flood attack detected - server.liewebs.es
Port Scan
DDoS Attack
๐ฎ๐ฉ
hermawan
2026-04-03 02:18:05
(4 months ago)
1775182679.355386 Cql0un4YkaqVk020Qj 168.235.203.247 8732 103.166.156.58 443 tcp - 3.070737 0 0 S0 F ...
show more
1775182679.355386 Cql0un4YkaqVk020Qj 168.235.203.247 8732 103.166.156.58 443 tcp - 3.070737 0 0 S0 F F 0 S 3 156 0 0 - 6 887591340188604_52 (empty) 29200_2-1-1-4-1-3_1460_7 (empty) 04/03/2026-09:17:59.355386
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2025-12-09 12:04:20
(8 months ago)
[Tue Dec 09 19:04:19.667657 2025] [security2:error] [pid 356713:tid 140625516058304] [client 168.235 ...
show more
[Tue Dec 09 19:04:19.667657 2025] [security2:error] [pid 356713:tid 140625516058304] [client 168.235.203.247:46250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "399"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561122-prakiraan-bulanan-curah-hujan-di-kota-kabupaten-kediri-untuk-6-bulan-ke-depan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561122-prakiraan-bulanan-curah-hujan-di-kota-kabupaten-kediri-untuk-6-bulan-ke-depan"] [unique_id "aTgQQ14qfEH
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-31 03:39:04
(10 months ago)
[Fri Oct 31 10:38:18.877269 2025] [security2:error] [pid 175730:tid 140418556528320] [client 168.235 ...
show more
[Fri Oct 31 10:38:18.877269 2025] [security2:error] [pid 175730:tid 140418556528320] [client 168.235.203.247:42950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "374"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-of-all-tags/klimatologi?start=4500 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/klimatologi"] [unique_id "aQQvKnAFjtvHuCoO5UoqTgAAA0A"], referer https://www.google.co.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[175757] [Fl2xGKwB+tw] [aQQvKnAFjtvHuCoO5UoqTgAAA0A] keep_alive=[0] [2025-10-31 10:38:18.877278] [R:aQQvKnAFjtvHuCoO5Uo
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-29 15:16:14
(10 months ago)
[Wed Oct 29 22:15:29.010446 2025] [security2:error] [pid 12220:tid 140638918964928] [client 168.235. ...
show more
[Wed Oct 29 22:15:29.010446 2025] [security2:error] [pid 12220:tid 140638918964928] [client 168.235.203.247:56338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "374"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562117-prediksi-bulanan-curah-hujan-bulan-oktober-tahun-2025-update-dari-analisis-bulan-juni-tahun-2025-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562117-prediksi-bulanan-curah-hujan-bulan-oktober-tahun-2025-update-dari-analisis-bulan-juni-tahun-2025-di-pr
...
show less
Hacking
Web App Attack
Anonymous
2025-10-26 16:32:20
(10 months ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
๐ฎ๐ฉ
hermawan
2025-10-24 01:21:33
(10 months ago)
[Fri Oct 24 08:20:52.842728 2025] [security2:error] [pid 2121904:tid 139969158969024] [client 168.23 ...
show more
[Fri Oct 24 08:20:52.842728 2025] [security2:error] [pid 2121904:tid 139969158969024] [client 168.235.203.247:43404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561145-prakiraan-bulanan-curah-hujan-di-kabupaten-tuban-untuk-6-bulan-ke-depan-2 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561145-prakiraan-bulanan-curah-hujan-di-kabupaten-tuban-untuk-6-bulan-ke-depan-2"] [unique_id "aPrUdIcIytuQdjvANs
...
show less
Hacking
Web App Attack
Anonymous
2025-10-23 06:18:58
(10 months ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
๐ฎ๐ฉ
hermawan
2025-10-13 03:12:00
(10 months ago)
[Mon Oct 13 10:11:29.677246 2025] [security2:error] [pid 955143:tid 139977765656256] [client 168.235 ...
show more
[Mon Oct 13 10:11:29.677246 2025] [security2:error] [pid 955143:tid 139977765656256] [client 168.235.203.247:21902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "aOxt4TPVZ7t_s2VTAYILBgAAAY0"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[955183]
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-07 20:59:30
(10 months ago)
[Wed Oct 08 02:22:26.467809 2025] [security2:error] [pid 213346:tid 140370654516928] [client 168.235 ...
show more
[Wed Oct 08 02:22:26.467809 2025] [security2:error] [pid 213346:tid 140370654516928] [client 168.235.203.247:44230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aOVoci3iPGwSmtde_MgZ2wAAA48"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[213388] [Ds71fBan9u0] [aOVoci3iPGwSmtde_MgZ2wAAA48] keep_alive=[0] [2025-10-08 02:22:26.467813] [R:aOVoci3iPGwSmtde_MgZ2wAAA48]
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-01 14:21:13
(10 months ago)
[Wed Oct 01 21:15:57.358947 2025] [security2:error] [pid 436371:tid 140566184568512] [client 168.235 ...
show more
[Wed Oct 01 21:15:57.358947 2025] [security2:error] [pid 436371:tid 140566184568512] [client 168.235.203.247:22424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aN03nea7Uu_kYuQuUt1ZnQAAA0c"], referer https://www.google.co.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[436408] [tb7SgZlAFl4] [aN03nea7Uu_kYuQuUt1ZnQAAA0c] keep_alive=[0] [2025-10-01 21:15:57.358956] [R:aN03nea7Uu_kYuQuUt1ZnQAAA0
...
show less
Hacking
Web App Attack
Anonymous
2025-09-29 15:07:19
(11 months ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH