๐ฎ๐ฉ
hermawan
2026-10-27 02:25:13
(1 day ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.155 - - [27/Oct/2026:09:25:11 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-puncak-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur HTTP/1.1" 403 3738 "-" "Mozilla ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.155 - - [27/Oct/2026:09:25:11 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-puncak-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-26 01:30:30
(3 days ago)
[Mon Oct 26 08:30:28.299584 2026] [security2:error] [pid 11492:tid 140267038430912] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Mon Oct 26 08:30:28.299584 2026] [security2:error] [pid 11492:tid 140267038430912] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan/perbandingan-prediksi-puncak-musim-hujan-dengan-normalnya HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan/perbandingan-prediksi-puncak-musim-hujan-dengan-normalnya"] [unique_id "at6tNKknX0cG-xadyl8pNQAAAMo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.i
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-23 08:45:57
(5 days ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.155 - - [23/Oct/2026:15:45:56 +0700] "GET /index.php/informasi-iklim/analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan/555560816-analisis-dan-prediksi-dasarian-dinamika-atmosfer-laut ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.155 - - [23/Oct/2026:15:45:56 +0700] "GET /index.php/informasi-iklim/analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan/555560816-analisis-dan-prediksi-dasarian-dinamika-atmosfer-laut-dan-prediksi-curah-hujan-pemutakhiran-dasarian-ii-maret-2024 HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-23 08:23:57
(5 days ago)
[Fri Oct 23 15:23:57.193647 2026] [security2:error] [pid 11441:tid 140102302955200] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Fri Oct 23 15:23:57.193647 2026] [security2:error] [pid 11441:tid 140102302955200] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-curah-hujan-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-curah-hujan-musim-hujan"] [unique_id "atsZnewg2dNbT1KYTYkPFgAAAIg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmk
...
show less
Email Spam
Hacking
๐ฒ๐พ
Rizzy
2026-10-23 04:24:32
(5 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2026-10-23 02:01:45
(5 days ago)
[Fri Oct 23 09:01:36.093504 2026] [security2:error] [pid 842604:tid 139901446018752] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/corerulese ...
show more
[Fri Oct 23 09:01:36.093504 2026] [security2:error] [pid 842604:tid 139901446018752] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-curah-hujan-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-curah-hujan-musim-hujan"] [unique_id "atrAABxsEe11rqfd0dp6gQAAAEA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bm
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-22 08:20:53
(6 days ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.155 - - [22/Oct/2026:15:20:48 +0700] "GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.155 - - [22/Oct/2026:15:20:48 +0700] "GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-22 08:01:45
(6 days ago)
[Thu Oct 22 15:01:44.402234 2026] [security2:error] [pid 2968:tid 139901525698240] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Thu Oct 22 15:01:44.402234 2026] [security2:error] [pid 2968:tid 139901525698240] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php?id=2890 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "atnC6CCTJYrL4YwYcLomhwAAAEM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3044] [gJtORunk3XU] [atnC6CCTJYrL4YwYcLomhwAAAEM] keep_alive=[0] [2026-10-22 15:01:44.402242] [R:atnC6CCTJYrL4YwYcLomhwAAAEM] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTM
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-21 01:36:23
(1 week ago)
[Wed Oct 21 08:34:32.946234 2026] [security2:error] [pid 19000:tid 140201347245760] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Wed Oct 21 08:34:32.946234 2026] [security2:error] [pid 19000:tid 140201347245760] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "atgWqMR3Cp7v_iZbadCDmgAAAI4"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[19090] [4FrDvw+z1mI] [atgWqMR3Cp7v_iZbadCDmgAAAI4] keep_
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-20 01:42:50
(1 week ago)
[Tue Oct 20 08:42:49.992281 2026] [security2:error] [pid 15266:tid 139776598460096] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Tue Oct 20 08:42:49.992281 2026] [security2:error] [pid 15266:tid 139776598460096] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/analisis-iklim/analisis-musim/images-klimatologi-analisis-peta-zona-musim-peta-zona-musim-zom-di-provinsi-jawa-timur-tahun-1991-2020 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/images-klimatologi-analisis-peta-zona-musim-peta-zona-musim-zom-di-provinsi-jawa-timur-tahun-1991-2020"] [unique_id "atbHGbkfBuUIhRoiY
...
show less
Email Spam
Hacking
Anonymous
2026-10-19 10:05:07
(1 week ago)
47.128.120.155 - - [19/Oct/2026:12:05:06 +0200] "GET / HTTP/2.0" 200 83742 "https:///" "Go-http-client/2.0"
Bad Web Bot
๐ฎ๐ฉ
hermawan
2026-10-19 00:51:52
(1 week ago)
[Mon Oct 19 07:51:51.273647 2026] [security2:error] [pid 748270:tid 139928130275008] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/corerulese ...
show more
[Mon Oct 19 07:51:51.273647 2026] [security2:error] [pid 748270:tid 139928130275008] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-curah-hujan-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-curah-hujan-musim-hujan"] [unique_id "atVppz19KKhzESfq0TbpqgAAAFc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bm
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-17 01:45:07
(1 week ago)
[Sat Oct 17 08:45:06.229648 2026] [security2:error] [pid 10200:tid 140148524177088] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Sat Oct 17 08:45:06.229648 2026] [security2:error] [pid 10200:tid 140148524177088] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-sifat-hujan-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prediksi-sifat-hujan-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur"] [unique_id "atLTIsdF5U_arar1wRhHwgAAAEI"] [staklim-jatim.
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-17 01:11:04
(1 week ago)
[Sat Oct 17 08:11:03.008141 2026] [security2:error] [pid 893283:tid 140318888404672] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/corerulese ...
show more
[Sat Oct 17 08:11:03.008141 2026] [security2:error] [pid 893283:tid 140318888404672] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "atLLJ4BEqFxGUJAIUQVLAAAAABE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[893327] [nu1b9P6ICcM] [atLLJ4BEqFxGUJAIUQVLAAAAABE] keep_alive=[0] [2026-10-17 08:11:03.008145] [R:atLLJ4BEqFxGUJAIUQVLAAAAABE] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-16 06:20:55
(1 week ago)
[Fri Oct 16 13:20:54.809877 2026] [security2:error] [pid 15840:tid 140319727281856] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Fri Oct 16 13:20:54.809877 2026] [security2:error] [pid 15840:tid 140319727281856] [client 47.128.120.155:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /alamat-kantor-v1.html HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/alamat-kantor-v1.html"] [unique_id "atHCRr_6nsOHn1UncXy1RQAAAQI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[15873] [AuusKq9Pd9g] [atHCRr_6nsOHn1UncXy1RQAAAQI] keep_alive=[0] [2026-10-16 13:20:54.809885] [R:atHCRr_6nsOHn1UncXy1RQAAAQI] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleW
...
show less
Email Spam
Hacking