๐ฎ๐ฉ
hermawan
2026-10-15 01:43:54
(5 hours ago)
[Thu Oct 15 08:43:53.481401 2026] [security2:error] [pid 8405:tid 139627507709632] [client 47.128.12 ...
show more
[Thu Oct 15 08:43:53.481401 2026] [security2:error] [pid 8405:tid 139627507709632] [client 47.128.120.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/4190 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/4190"] [unique_id "atAv2Yf10cfM6pWs7OW2bwAAAAk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[8514] [jS0gLtfsJ7A] [atAv2Yf10cfM6pWs7OW2bwAAAAk] keep_alive=[0] [2026-10-15 08:43:53.481410] [R:atAv2Yf10cfM6pWs
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-15 01:25:05
(5 hours ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.162 - - [15/Oct/2026:08:24:56 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.162 - - [15/Oct/2026:08:24:56 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-sifat-hujan-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-14 02:42:48
(1 day ago)
[Wed Oct 14 09:42:47.951614 2026] [security2:error] [pid 1826377:tid 140402430547648] [client 47.128 ...
show more
[Wed Oct 14 09:42:47.951614 2026] [security2:error] [pid 1826377:tid 140402430547648] [client 47.128.120.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan"] [unique_id "as7sJ-BTcTJ4semuVAXwYwAAAAs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1826497] [+Y304kMQ0zU] [as7sJ-BTcTJ4se
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-14 02:03:24
(1 day ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.162 - - [14/Oct/2026:09:03:21 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.162 - - [14/Oct/2026:09:03:21 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/4511 HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฒ๐พ
Rizzy
2026-10-11 18:22:12
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2026-10-10 16:20:16
(4 days ago)
[Sat Oct 10 23:20:16.115323 2026] [security2:error] [pid 4381:tid 140630248388288] [client 47.128.12 ...
show more
[Sat Oct 10 23:20:16.115323 2026] [security2:error] [pid 4381:tid 140630248388288] [client 47.128.120.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan"] [unique_id "asplwC7SREfo0zDYkXNuXQAAAAI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[4438] [I6QW1z5imSQ] [asplwC7SREfo0zDYkXNu
...
show less
Email Spam
Hacking
๐ฉ๐ช
ghostwarriors
2026-10-07 08:20:15
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
hermawan
2026-10-05 01:17:36
(1 week ago)
[Mon Oct 05 08:17:33.949391 2026] [security2:error] [pid 4337:tid 139746172966592] [client 47.128.12 ...
show more
[Mon Oct 05 08:17:33.949391 2026] [security2:error] [pid 4337:tid 139746172966592] [client 47.128.120.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/normal-klimatologi HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/normal-klimatologi"] [unique_id "asL6ra0DeJUucdn7YYLVfQAAAJQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[4428] [FbOQpc0qtl8] [asL6ra0DeJUucdn7YYLVfQAAAJQ] keep_alive=[0] [2026-10-05 08:17:33
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-02 02:51:18
(1 week ago)
[Fri Oct 02 09:51:13.049239 2026] [security2:error] [pid 3051:tid 140167985747648] [client 47.128.12 ...
show more
[Fri Oct 02 09:51:13.049239 2026] [security2:error] [pid 3051:tid 140167985747648] [client 47.128.120.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-awal-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-awal-musim-hujan"] [unique_id "ar8cIWFhl6bCvMCZXxWmGQAAAMk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-02 02:02:26
(1 week ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.162 - - [02/Oct/2026:08:59:08 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.162 - - [02/Oct/2026:08:59:08 +0700] "GET /index.php/108-sumber-daya-manusia/struktur-organisasi/77-selamat-datang-di-stasiun-klimatologi-karangploso-malang HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-01 03:13:36
(2 weeks ago)
[Thu Oct 01 10:13:16.555125 2026] [security2:error] [pid 24942:tid 140213737121472] [client 47.128.1 ...
show more
[Thu Oct 01 10:13:16.555125 2026] [security2:error] [pid 24942:tid 140213737121472] [client 47.128.120.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan-di-provinsi-jawa-timur"] [unique_id "ar3PzEDZe8QBKZNMYMRwiAAAAIE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id]
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-29 02:23:06
(2 weeks ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.162 - - [29/Sep/2026:09:21:10 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.162 - - [29/Sep/2026:09:21:10 +0700] "GET /index.php/component/tags/tag/182 HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-28 03:25:12
(2 weeks ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.162 - - [28/Sep/2026:10:23:53 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.162 - - [28/Sep/2026:10:23:53 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-25 02:07:13
(2 weeks ago)
[Fri Sep 25 09:02:10.103898 2026] [security2:error] [pid 4444:tid 139670717458112] [client 47.128.12 ...
show more
[Fri Sep 25 09:02:10.103898 2026] [security2:error] [pid 4444:tid 139670717458112] [client 47.128.120.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-klimatologi?start=1500 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-klimatologi"] [unique_id "arXWIrc7JQKohHNMnjZnugAAAIg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[4506] [BNqpGoVzBtg] [arXWIrc7JQKohHNMnjZnugAAAIg] keep_alive=[0] [2026
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-24 02:38:45
(3 weeks ago)
[Thu Sep 24 09:38:43.941394 2026] [security2:error] [pid 6179:tid 139648026269376] [client 47.128.12 ...
show more
[Thu Sep 24 09:38:43.941394 2026] [security2:error] [pid 6179:tid 139648026269376] [client 47.128.120.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "arSNMzLEcFIDLBhvWwONZwAAAJE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[6252] [ysaVfzEpB7Y] [arSN
...
show less
Email Spam
Hacking