๐ฎ๐ฉ
hermawan
2026-10-23 06:36:56
(5 days ago)
Captured JA4H: ge11n_04726067e501 | Log: 178.171.22.100 - - [23/Oct/2026:13:36:53 +0700] "GET /pdfjs ...
show more
Captured JA4H: ge11n_04726067e501 | Log: 178.171.22.100 - - [23/Oct/2026:13:36:53 +0700] "GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur/2026/05_Mei_2026/Das-I/Monitoring_dan_Prediksi_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur_Update_10_Mei_2026.pdf HTTP/1.1" 403 3738 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-16 10:02:07
(1 week ago)
Captured JA4H: ge11n_04726067e501 | Log: 178.171.22.100 - - [16/Oct/2026:17:02:00 +0700] "GET /index ...
show more
Captured JA4H: ge11n_04726067e501 | Log: 178.171.22.100 - - [16/Oct/2026:17:02:00 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/1.1" 200 16925 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-26 00:48:22
(1 month ago)
[Sat Sep 26 07:48:18.174657 2026] [security2:error] [pid 481871:tid 140463977768640] [client 178.171 ...
show more
[Sat Sep 26 07:48:18.174657 2026] [security2:error] [pid 481871:tid 140463977768640] [client 178.171.22.100:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".mkv" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: .mkv found within REQUEST_FILENAME: /bb78a9424bcdba8c85a5c436102e.mkv request_line = GET /bb78a9424bcdba8c85a5c436102e.mkv HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/bb78a9424bcdba8c85a5c436102e.mkv"] [unique_id "arcWUhgt1eW28xTbLntKTQAAAAc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[481911] [E1pXMNiwxmg] [arcWUhgt1eW28xTbLntKTQAAAAc] keep_alive=[0] [2026-09-26 07:48:18.174664] [R:arcWUhgt1eW28xTbLntKTQAAAAc] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36' Host:'staklim-jatim
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-24 04:10:21
(1 month ago)
Captured JA4H: ge11n_04726067e501 | Log: 178.171.22.100 - - [24/Sep/2026:11:09:49 +0700] "GET /index ...
show more
Captured JA4H: ge11n_04726067e501 | Log: 178.171.22.100 - - [24/Sep/2026:11:09:49 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/1.1" 200 14317 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-24 02:19:24
(1 month ago)
Captured JA4H: ge11n_04726067e501 | Log: 178.171.22.100 - - [24/Sep/2026:09:17:50 +0700] "GET /index ...
show more
Captured JA4H: ge11n_04726067e501 | Log: 178.171.22.100 - - [24/Sep/2026:09:17:50 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/1.1" 200 14348 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-23 05:41:35
(1 month ago)
Captured JA4H: ge11n_04726067e501 | Log: 178.171.22.100 - - [23/Sep/2026:12:38:48 +0700] "GET / HTTP ...
show more
Captured JA4H: ge11n_04726067e501 | Log: 178.171.22.100 - - [23/Sep/2026:12:38:48 +0700] "GET / HTTP/1.1" 200 14334 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-04-01 06:50:51
(6 months ago)
1775026214.913961 CFIOog1j8M9GUNjSn 178.171.22.100 34523 103.166.156.58 443 tcp - 4.127637 0 0 S0 F ...
show more
1775026214.913961 CFIOog1j8M9GUNjSn 178.171.22.100 34523 103.166.156.58 443 tcp - 4.127637 0 0 S0 F F 0 S 4 240 0 0 - 6 887513107985144_54 (empty) 65535_2-4-8-1-3_1436_9 (empty) 04/01/2026-13:50:14.913961
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-03-31 06:13:25
(6 months ago)
1774937286.665710 C1iiLy39vxFDti4yy4 178.171.22.100 44681 103.166.156.58 443 tcp - 3.071830 0 0 S0 F ...
show more
1774937286.665710 C1iiLy39vxFDti4yy4 178.171.22.100 44681 103.166.156.58 443 tcp - 3.071830 0 0 S0 F F 0 S 4 240 0 0 - 6 887468643844238_54 (empty) 65535_2-4-8-1-3_1436_9 (empty) 03/31/2026-13:08:06.665710
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-03-27 01:12:01
(7 months ago)
1774573914.852182 CtP3q32lJuJR3XSU76 178.171.22.100 39205 103.166.156.58 443 tcp - 4.129828 0 0 S0 F ...
show more
1774573914.852182 CtP3q32lJuJR3XSU76 178.171.22.100 39205 103.166.156.58 443 tcp - 4.129828 0 0 S0 F F 0 S 5 300 0 0 - 6 887286957955152_54 (empty) 65535_2-4-8-1-3_1436_9 (empty) 03/27/2026-08:11:54.852182
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-03-23 08:42:27
(7 months ago)
1774255339.720724 CWucOw4xSbVfMksnqh 178.171.22.100 46389 103.166.156.58 443 tcp - 4.125582 0 0 S0 F ...
show more
1774255339.720724 CWucOw4xSbVfMksnqh 178.171.22.100 46389 103.166.156.58 443 tcp - 4.125582 0 0 S0 F F 0 S 5 300 0 0 - 6 887127670387192_54 (empty) 65535_2-4-8-1-3_1436_9 (empty) 03/23/2026-15:42:19.720724
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-03-20 05:50:19
(7 months ago)
2026-03-20T12:50:15.474699+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ...
show more
2026-03-20T12:50:15.474699+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=178.171.22.100 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=2902 DF PROTO=TCP SPT=44561 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-03-20 02:11:13
(7 months ago)
2026-03-20T09:01:48.854647+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ...
show more
2026-03-20T09:01:48.854647+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=178.171.22.100 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=22274 DF PROTO=TCP SPT=39405 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-03-19 01:21:07
(7 months ago)
2026-03-19T07:29:34.992668+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ...
show more
2026-03-19T07:29:34.992668+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=178.171.22.100 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=21599 DF PROTO=TCP SPT=39511 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-03-16 04:34:10
(7 months ago)
2026-03-15T15:33:02.896228+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ...
show more
2026-03-15T15:33:02.896228+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=178.171.22.100 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=10307 DF PROTO=TCP SPT=44679 DPT=443 WINDOW=43080 RES=0x00 SYN URGP=0
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-01-21 05:21:11
(9 months ago)
[Wed Jan 21 12:21:09.444327 2026] [security2:error] [pid 738542:tid 140155816937152] [client 178.171 ...
show more
[Wed Jan 21 12:21:09.444327 2026] [security2:error] [pid 738542:tid 140155816937152] [client 178.171.22.100:38177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/var/" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "88"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /var/ found within REQUEST_FILENAME: /var/www/index.php/informasi-iklim/buletin-1/buletin-prakiraan-musim-hujan request_line = GET /var/www/index.php/informasi-iklim/buletin-1/buletin-prakiraan-musim-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/var/www/index.php/informasi-iklim/buletin-1/buletin-prakiraan-musim-hujan"] [unique_id "aXBiRTi09f9qwYNIlZ1C0AAAghg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[738567] [CUd2Fx8X1aY] [aXBiRTi09f9qwYNIlZ1C0AAAghg] keep_alive=[1] [2026-01-21 12:21:09.444330] [R:aXBiRTi09f9qwYNIlZ1C0AAAghg] UA:'Mozilla/5.
...
show less
Hacking
Web App Attack