🇮🇩
hermawan
2026-11-06 06:18:01
UTC ·
(13 hours ago)
[Fri Nov 06 13:18:00.148573 2026] [security2:error] [pid 60235:tid 139782176888512] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Fri Nov 06 13:18:00.148573 2026] [security2:error] [pid 60235:tid 139782176888512] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "au1xGHrVYhCCBGUAprSiegAAAQ4"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[60279] [vKbukn2wBcA] [au1xGHrVYhCCBGUAprSiegAAAQ4] keep_
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-02 01:07:02
UTC ·
(4 days ago)
[Mon Nov 02 08:07:02.342358 2026] [authz_core:error] [pid 639090:tid 139643001497280] [client 47.128.120.194:0] AH01630: client denied by server configuration: /var/www/html/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[639229] ...
show more
[Mon Nov 02 08:07:02.342358 2026] [authz_core:error] [pid 639090:tid 139643001497280] [client 47.128.120.194:0] AH01630: client denied by server configuration: /var/www/html/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[639229] [1LJ5w8BaeGM] [aufiNiZLO-SkW0cPzRhZ4gAAAFc] keep_alive=[0] [2026-11-02 08:07:02.342368] [R:aufiNiZLO-SkW0cPzRhZ4gAAAFc] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7' Accept-Encoding:'gzip, br Accept-Language:'en-US,en;q=0.5 Upgrade-Insecure-Requests:'1
...
show less
Email Spam
Hacking
🇲🇾
Rizzy
2026-11-01 18:21:25
UTC ·
(5 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇮🇩
hermawan
2026-11-01 10:48:56
UTC ·
(5 days ago)
[Sun Nov 01 17:48:54.671299 2026] [security2:error] [pid 3360:tid 140594198234816] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Sun Nov 01 17:48:54.671299 2026] [security2:error] [pid 3360:tid 140594198234816] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /alamat-kantor-v1.html HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/alamat-kantor-v1.html"] [unique_id "aucZFg4mAT9T4X-1M0p0mgAAAAE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3494] [FSSSxjS9DLs] [aucZFg4mAT9T4X-1M0p0mgAAAAE] keep_alive=[0] [2026-11-01 17:48:54.671309] [R:aucZFg4mAT9T4X-1M0p0mgAAAAE] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWeb
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-31 18:43:32
UTC ·
(6 days ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.194 - - [01/Nov/2026:01:43:28 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/peta-zona-musim-zom-propinsi-jawa-timur HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/ ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.194 - - [01/Nov/2026:01:43:28 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/peta-zona-musim-zom-propinsi-jawa-timur HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-31 18:25:52
UTC ·
(6 days ago)
[Sun Nov 01 01:25:51.968533 2026] [security2:error] [pid 21461:tid 140139548374720] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Sun Nov 01 01:25:51.968533 2026] [security2:error] [pid 21461:tid 140139548374720] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/112-meteorologi/analisis-meteorologi/85-tinjauan-cuaca-iklim-di-wilayah-jawa-timur-terkini HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/112-meteorologi/analisis-meteorologi/85-tinjauan-cuaca-iklim-di-wilayah-jawa-timur-terkini"] [unique_id "auYyrz-l6O2agzrLLVwebAA
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-31 10:59:43
UTC ·
(6 days ago)
[Sat Oct 31 17:59:39.711717 2026] [security2:error] [pid 18508:tid 140162751256256] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Sat Oct 31 17:59:39.711717 2026] [security2:error] [pid 18508:tid 140162751256256] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/hukum-dan-peraturan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/hukum-dan-peraturan"] [unique_id "auXKG_jiyN1e4DsqRTlJMQAAAAU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[18541] [xU0tzyBwSU0] [auXKG_jiyN1e4DsqRTlJMQAAAAU] keep_alive=[0] [2026-10-31 17:5
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-31 04:29:35
UTC ·
(6 days ago)
[Sat Oct 31 11:29:34.969570 2026] [authz_core:error] [pid 26409:tid 140190316213952] [client 47.128.120.194:0] AH01630: client denied by server configuration: /var/www/html/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[26562] [ ...
show more
[Sat Oct 31 11:29:34.969570 2026] [authz_core:error] [pid 26409:tid 140190316213952] [client 47.128.120.194:0] AH01630: client denied by server configuration: /var/www/html/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[26562] [4FIlXNvBsPk] [auVurpZyvbg5Gj6i-ioBcAAAAJg] keep_alive=[0] [2026-10-31 11:29:34.969580] [R:auVurpZyvbg5Gj6i-ioBcAAAAJg] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )' Host:'staklim-jatim.bmkg.go.id' COOKIE:'cf_clearance=CriECvOaFtxRPZ2ZhM7W9IFE2qM7e3QNA6NH4F7tOVzb_XG-gfBlfryiUIcNa54HMyMFTHnxy9VhJZPpzXCTXaRlm4mI6rz6iPiQZfJer0OFJykHJx3R4qWwixD6rd6V33I4VKHS3gR5-ltOq6vPNL0hf2vYQhDppH-X7_zaIipN6DjHaPV0Zgwy6tSbUQIPtc-OpvVCOCvAsN9idO-fLVqgN0ip5uYXGSyebh-MWrYJ7UH3ylmT7eECW5tziCjciQessg350NwER3E9r1gLziKSuTUboFxK5DXVXF3ETlV_LIhWZD6H_WTMhT-a66rtlgcweoVmuKzbdRVb-rgNyVlIayo8xMWfOiPh6I6AaKBbqvdCWScCsDkD4GxucTvK_mwH15y6CXA9-u0WNCJDVZ76iKtaTMYRwg' ACC
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-29 12:49:49
UTC ·
(1 week ago)
[Thu Oct 29 19:49:48.405642 2026] [security2:error] [pid 4230:tid 140717875779264] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Thu Oct 29 19:49:48.405642 2026] [security2:error] [pid 4230:tid 140717875779264] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/hukum-dan-peraturan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/hukum-dan-peraturan"] [unique_id "auNA7LrAC_h5hxwo3SASBgAAAIY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[4295] [SDVnHbqrq5U] [auNA7LrAC_h5hxwo3SASBgAAAIY] keep_alive=[0] [2026-10-29 19:49:
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-27 01:40:18
UTC ·
(1 week ago)
[Tue Oct 27 08:40:18.069046 2026] [security2:error] [pid 27512:tid 139873059075776] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Tue Oct 27 08:40:18.069046 2026] [security2:error] [pid 27512:tid 139873059075776] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan"] [unique_id "auABAoOhnhAoR0VElvRoMQAAAIg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[27562] [5sVhhw
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-26 01:31:13
UTC ·
(1 week ago)
[Mon Oct 26 08:31:12.970161 2026] [security2:error] [pid 11492:tid 140267013252800] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Mon Oct 26 08:31:12.970161 2026] [security2:error] [pid 11492:tid 140267013252800] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/4380-klimatologi/infografis/infografis-klimatologi/infografis-harian/suhu-minimum-harian-di-jawa-timur/suhu-minimum-harian-di-jawa-timur-tahun-2026/555563199-suhu-minimum-harian-di-jawa-timur-tanggal-18-juni-2026-pukul-07-01-wib-1..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categ
...
show less
Email Spam
Hacking
🇲🇾
Rizzy
2026-10-24 13:38:55
UTC ·
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇮🇩
hermawan
2026-10-23 08:40:56
UTC ·
(2 weeks ago)
[Fri Oct 23 15:40:55.782053 2026] [security2:error] [pid 19718:tid 140102160344768] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Fri Oct 23 15:40:55.782053 2026] [security2:error] [pid 19718:tid 140102160344768] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/monitoring-kualitas-udara-pm2-5 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/monitoring-kualitas-udara-pm2-5"] [unique_id "atsdl2rdB82ALwR08DATSQAAAMk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[19754] [/zVN8H3ck08] [atsdl2rdB82ALwR08DATSQAAAMk] keep_al
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-23 02:01:47
UTC ·
(2 weeks ago)
[Fri Oct 23 09:01:43.141250 2026] [security2:error] [pid 842657:tid 139901160904384] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/corerulese ...
show more
[Fri Oct 23 09:01:43.141250 2026] [security2:error] [pid 842657:tid 139901160904384] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-prediksi-sifat-hujan-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-prediksi-sifat-hujan-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur"] [unique_id "atrAB7
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-22 08:18:36
UTC ·
(2 weeks ago)
[Thu Oct 22 15:18:35.989134 2026] [security2:error] [pid 19686:tid 139900707927744] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Thu Oct 22 15:18:35.989134 2026] [security2:error] [pid 19686:tid 139900707927744] [client 47.128.120.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/informasi-iklim/perubahan-iklim/126-artikel-perubahan-iklim HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/perubahan-iklim/126-artikel-perubahan-iklim"] [unique_id "atnG288oiSRTOhh_dqbAuwAAAJI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[19784] [UPuZgimOwnU] [atnG288oiSRTOhh_dqbAuwAAAJI] keep_alive=[0] [2026-10
...
show less
Email Spam
Hacking