๐ฎ๐ฉ
hermawan
2026-10-23 08:16:23
(5 hours ago)
Captured JA4H: ge11n_8bee1065cec5 | Log: 2001:4860:7:806::cf - - [23/Oct/2026:15:16:18 +0700] "GET / ...
show more
Captured JA4H: ge11n_8bee1065cec5 | Log: 2001:4860:7:806::cf - - [23/Oct/2026:15:16:18 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/analisis-distribusi-sifat-hujan-jawa-timur-bulanan-tahun-2002 HTTP/1.1" 200 14030 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Mobile Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-purpose,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-22 08:43:13
(1 day ago)
[Thu Oct 22 15:43:12.814950 2026] [security2:error] [pid 31891:tid 139900212987584] [client 2001:486 ...
show more
[Thu Oct 22 15:43:12.814950 2026] [security2:error] [pid 31891:tid 139900212987584] [client 2001:4860:7:806::cf:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Client-Data" at REQUEST_HEADERS_NAMES:x-client-data. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "461"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Client-Data found within REQUEST_HEADERS_NAMES:x-client-data: x-client-data request_line = GET /b/bulanansurabaya.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulanansurabaya.pdf"] [unique_id "atnMoP4GpuIJcKPKjNErKgAAABU"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[31968] [bMeg2ml6RnQ] [atnMoP4GpuIJcKPKjNErKgAAABU] keep_alive=[0] [2026-10-22 15:43:12.814957] [R:atnMoP4GpuIJcKPKjNErKgAAABU] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-16 07:54:16
(1 week ago)
Captured JA4H: ge11n_8bee1065cec5 | Log: 2001:4860:7:806::cf - - [16/Oct/2026:14:54:08 +0700] "GET / ...
show more
Captured JA4H: ge11n_8bee1065cec5 | Log: 2001:4860:7:806::cf - - [16/Oct/2026:14:54:08 +0700] "GET / HTTP/1.1" 200 14367 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-purpose,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-15 03:38:21
(1 week ago)
Captured JA4H: ge11n_8bee1065cec5 | Log: 2001:4860:7:806::cf - - [15/Oct/2026:10:38:07 +0700] "GET / ...
show more
Captured JA4H: ge11n_8bee1065cec5 | Log: 2001:4860:7:806::cf - - [15/Oct/2026:10:38:07 +0700] "GET / HTTP/1.1" 200 14409 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Mobile Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-purpose,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-10 16:25:04
(1 week ago)
Captured JA4H: ge11n_8bee1065cec5 | Log: 2001:4860:7:806::cf - - [10/Oct/2026:23:24:27 +0700] "GET / ...
show more
Captured JA4H: ge11n_8bee1065cec5 | Log: 2001:4860:7:806::cf - - [10/Oct/2026:23:24:27 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/1.1" 200 14735 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-purpose,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-24 03:04:50
(4 weeks ago)
Captured JA4H: ge11n_8bee1065cec5 | Log: 2001:4860:7:806::cf - - [24/Sep/2026:10:04:34 +0700] "GET / ...
show more
Captured JA4H: ge11n_8bee1065cec5 | Log: 2001:4860:7:806::cf - - [24/Sep/2026:10:04:34 +0700] "GET /index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555563194-prediksi-bulanan-sifat-hujan-bulan-agustus-tahun-2026-update-dari-analisis-bulan-mei-tahun-2026-di-provinsi-jawa-timur HTTP/1.1" 200 28324 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-purpose,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐น
VHosting
2026-08-09 14:46:09
(2 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
๐ธ๐ฌ
securejdprop
2026-04-16 02:46:44
(6 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
Hacking
Web App Attack