๐ฎ๐ฉ
hermawan
2026-10-21 01:48:38
(14 hours ago)
[Wed Oct 21 08:48:37.151214 2026] [security2:error] [pid 29308:tid 140201865131712] [client 47.128.1 ...
show more
[Wed Oct 21 08:48:37.151214 2026] [security2:error] [pid 29308:tid 140201865131712] [client 47.128.120.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/component/tags/tag/333 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/333"] [unique_id "atgZ9XESFlDFdel4xTFX2wAAAII"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[29357] [heoU8g8w5GI] [atgZ9XESFlDFdel4xTFX2wAAAII] keep_alive=[0] [2026-10-21 08:48:37.151222] [R:atgZ9XESFlDFdel4xTFX2wAAAII] UA:'Mozilla/5.0 (Linu
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-21 01:01:52
(15 hours ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.179 - - [21/Oct/2026:08:01:32 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.179 - - [21/Oct/2026:08:01:32 +0700] "GET /index.php/analisis-iklim/analisis-musim/images-klimatologi-analisis-peta-zona-musim-peta-zona-musim-zom-di-provinsi-jawa-timur-tahun-1991-2020 HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-20 01:51:29
(1 day ago)
[Tue Oct 20 08:51:28.445399 2026] [security2:error] [pid 21840:tid 139776338417344] [client 47.128.1 ...
show more
[Tue Oct 20 08:51:28.445399 2026] [security2:error] [pid 21840:tid 139776338417344] [client 47.128.120.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-deterministik-curah-hujan-dasarian HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-deterministik-curah-hujan-dasarian"] [unique_id "atbJILMQBNw5PTY3EZDMXgAAABA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[21928] [IDxz3vsrGn8] [atbJILMQBN
...
show less
Email Spam
Hacking
๐ฒ๐พ
Rizzy
2026-10-19 19:13:40
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2026-10-19 00:52:37
(2 days ago)
[Mon Oct 19 07:52:34.861265 2026] [security2:error] [pid 748217:tid 139929690461888] [client 47.128. ...
show more
[Mon Oct 19 07:52:34.861265 2026] [security2:error] [pid 748217:tid 139929690461888] [client 47.128.120.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "atVp0hDpyFTOa78Po0VArAAAAAA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[748244] [EoP97ebGWQs] [atVp0hDpyFTOa78Po0VArAAAAAA] keep_alive=[0] [2026-10-19 07:52:34.861275] [R:atVp0hDpyFTOa78Po0VArAAAAAA] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-17 01:58:40
(4 days ago)
[Sat Oct 17 08:58:40.191053 2026] [security2:error] [pid 16306:tid 140148490606272] [client 47.128.1 ...
show more
[Sat Oct 17 08:58:40.191053 2026] [security2:error] [pid 16306:tid 140148490606272] [client 47.128.120.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/3965-klimatologi/infografis/infografis-klimatologi/555563373-mengenal-faktor-pengendali-iklim-di-indonesia HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/3965-klimatologi/infografis/infografis-klimatologi/555563373-mengenal-faktor-pengendali-iklim-di-indonesia"] [un
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-16 06:12:12
(5 days ago)
[Fri Oct 16 13:12:11.467551 2026] [security2:error] [pid 8376:tid 140319567886016] [client 47.128.12 ...
show more
[Fri Oct 16 13:12:11.467551 2026] [security2:error] [pid 8376:tid 140319567886016] [client 47.128.120.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/infografis-bulanan-iklim-ekstrim-tahun-2025 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/infografis-bulanan-iklim-ekstrim-tahun-2025"] [unique_id "atHAO29MYZk0aXU3gSESCwAAAIw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[8422] [61h7Cy+xetg] [atHAO29MYZk0aX
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-15 02:08:09
(6 days ago)
[Thu Oct 15 09:08:08.399839 2026] [security2:error] [pid 25395:tid 139627440633536] [client 47.128.1 ...
show more
[Thu Oct 15 09:08:08.399839 2026] [security2:error] [pid 25395:tid 139627440633536] [client 47.128.120.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-prediksi-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-prediksi-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur"] [unique_id "atA1iF3D_0QzWklVtvP6v
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-14 02:44:05
(1 week ago)
[Wed Oct 14 09:44:03.061993 2026] [security2:error] [pid 1826458:tid 140402698983104] [client 47.128 ...
show more
[Wed Oct 14 09:44:03.061993 2026] [security2:error] [pid 1826458:tid 140402698983104] [client 47.128.120.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/4308 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/4308"] [unique_id "as7sczG7ap3qkd6CvnlkAgAAAIs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1826523] [3Ypu50PD0zU] [as7sczG7ap3qkd6CvnlkAgAAAIs] keep_alive=[0] [2026-10-14 09:44:03.062002] [R:as7sczG7ap
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-14 01:58:23
(1 week ago)
[Wed Oct 14 08:58:18.881427 2026] [security2:error] [pid 1772475:tid 140618462373568] [client 47.128 ...
show more
[Wed Oct 14 08:58:18.881427 2026] [security2:error] [pid 1772475:tid 140618462373568] [client 47.128.120.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/monitoring-kualitas-udara-pm2-5 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/monitoring-kualitas-udara-pm2-5"] [unique_id "as7hugsb0I75jJX5jOncxQAAAJQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1772522] [6pjdQwPwh7Y] [as7hugsb0I75jJX5jOncxQAAAJQ] kee
...
show less
Email Spam
Hacking
๐ช๐ธ
librebit
2026-10-10 16:39:33
(1 week ago)
Brute force
Brute-Force
๐ฎ๐ฉ
hermawan
2026-10-10 16:19:05
(1 week ago)
[Sat Oct 10 23:19:04.654726 2026] [security2:error] [pid 4443:tid 140629602444992] [client 47.128.12 ...
show more
[Sat Oct 10 23:19:04.654726 2026] [security2:error] [pid 4443:tid 140629602444992] [client 47.128.120.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prakiraan-musim/4389-prakiraan-musim-hujan/prakiraan-curah-hujan-musim-hujan/prakiraan-curah-hujan-musim-hujan-di-propinsi-jawa-timur/prediksi-curah-hujan-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur/555563481-prediksi-6-bulanan-curah-hujan-musim-hujan..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4389-prakiraan-mus
...
show less
Email Spam
Hacking
๐ฒ๐พ
Rizzy
2026-10-09 06:43:48
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2026-10-05 01:38:56
(2 weeks ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.179 - - [05/Oct/2026:08:35:18 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.179 - - [05/Oct/2026:08:35:18 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/4308 HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-05 01:15:21
(2 weeks ago)
[Mon Oct 05 08:15:20.005658 2026] [security2:error] [pid 4337:tid 139745619343040] [client 47.128.12 ...
show more
[Mon Oct 05 08:15:20.005658 2026] [security2:error] [pid 4337:tid 139745619343040] [client 47.128.120.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/normal-klimatologi HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/normal-klimatologi"] [unique_id "asL6J60DeJUucdn7YYLVTAAAAJU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[4429] [WdOUnQ0rtl8] [asL6J60DeJUucdn7YYLVTAAAAJU] keep_alive=[0] [2026-10-05 08:15:20
...
show less
Email Spam
Hacking