🇮🇩
hermawan
2026-11-09 02:01:37
UTC ·
(1 day ago)
[Mon Nov 09 09:01:36.222660 2026] [security2:error] [pid 296294:tid 140391969957568] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/corerulese ...
show more
[Mon Nov 09 09:01:36.222660 2026] [security2:error] [pid 296294:tid 140391969957568] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "280"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prakiraan-musim/4386-prakiraan-musim-hujan/prakiraan-puncak-musim-hujan/prediksi-puncak-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur/555563551-prediksi-puncak-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4386-prakiraan-musim-hujan/prakiraan-punca
...
show less
Email Spam
Hacking
🇩🇪
ghostwarriors
2026-11-09 01:53:40
UTC ·
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-11-09 00:59:08
UTC ·
(1 day ago)
[Mon Nov 09 07:58:54.142054 2026] [security2:error] [pid 265052:tid 140203066898112] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/corerulese ...
show more
[Mon Nov 09 07:58:54.142054 2026] [security2:error] [pid 265052:tid 140203066898112] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "280"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/4308 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/4308"] [unique_id "avEazhMzf9yWKxe5p4pwAQAAAMo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[265089] [buFDd40ngLY] [avEazhMzf9yWKxe5p4pwAQAAAMo] keep_alive=[0] [2026-11-09 07:58:54.142063] [R:avEazhMzf9yW
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-08 17:31:15
UTC ·
(1 day ago)
[Mon Nov 09 00:31:15.502913 2026] [security2:error] [pid 21015:tid 140015543662272] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Mon Nov 09 00:31:15.502913 2026] [security2:error] [pid 21015:tid 140015543662272] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "280"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prakiraan-musim/4388-prakiraan-musim-hujan/prakiraan-sifat-hujan-musim-hujan/prakiraan-sifat-hujan-musim-hujan-di-propinsi-jawa-timur/prediksi-sifat-hujan-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur/555563484-prediksi-sifat-hujan-musim-hujan-tahun-202..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4388-prakiraan-mu
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-08 08:38:16
UTC ·
(1 day ago)
[Sun Nov 08 15:38:16.268566 2026] [security2:error] [pid 2568:tid 140521985005248] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Sun Nov 08 15:38:16.268566 2026] [security2:error] [pid 2568:tid 140521985005248] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "280"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "avA0-JjEy_aMmCEAfAtM9gAAAEU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2628] [PDlBxL8UsvA] [avA0-JjEy_aMmCEAfAtM9gAAAEU] keep_al
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-08 07:19:44
UTC ·
(1 day ago)
[Sun Nov 08 14:19:43.517731 2026] [security2:error] [pid 27044:tid 140715359180480] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Sun Nov 08 14:19:43.517731 2026] [security2:error] [pid 27044:tid 140715359180480] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "280"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan-indeks-kekeringan-dan-kebasahan-meteorologis-3-bulanan-di-provinsi-jawa-timur-tahun-2026 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan-indeks-kekeringan-dan-kebasahan-meteorologis-3-bulanan-di-provinsi-jawa-timur-tahun-2026"] [unique_id
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-07 02:51:26
UTC ·
(3 days ago)
[Sat Nov 07 09:51:25.828418 2026] [security2:error] [pid 19180:tid 140207412188864] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Sat Nov 07 09:51:25.828418 2026] [security2:error] [pid 19180:tid 140207412188864] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur"] [unique_id "au6SLRlZCxJ9cg1EJyogVgAAAJc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[19208] [27kDzo5Egu8] [au6SLRlZCxJ9cg
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-06 08:32:06
UTC ·
(3 days ago)
[Fri Nov 06 15:32:05.164901 2026] [security2:error] [pid 111306:tid 139782059456192] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/corerulese ...
show more
[Fri Nov 06 15:32:05.164901 2026] [security2:error] [pid 111306:tid 139782059456192] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-sifat-hujan-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prediksi-sifat-hujan-musim-hujan-tahun-2026-2027-zona-musim-di-provinsi-jawa-timur"] [unique_id "au2QhVKBCeNip0whrXt97AAAAAs"] [staklim-jatim
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-02 01:10:00
UTC ·
(1 week ago)
[Mon Nov 02 08:09:59.931293 2026] [authz_core:error] [pid 639090:tid 139643647375040] [client 47.128.120.222:0] AH01630: client denied by server configuration: /var/www/html/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[639207] ...
show more
[Mon Nov 02 08:09:59.931293 2026] [authz_core:error] [pid 639090:tid 139643647375040] [client 47.128.120.222:0] AH01630: client denied by server configuration: /var/www/html/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[639207] [mX0PzoBZeGM] [aufi5yZLO-SkW0cPzRhafQAAAEw] keep_alive=[0] [2026-11-02 08:09:59.931300] [R:aufi5yZLO-SkW0cPzRhafQAAAEw] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7' Accept-Encoding:'gzip, br Accept-Language:'en-US,en;q=0.5 Upgrade-Insecure-Requests:'1
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-01 10:52:00
UTC ·
(1 week ago)
[Sun Nov 01 17:51:59.726831 2026] [security2:error] [pid 3360:tid 140594206627520] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Sun Nov 01 17:51:59.726831 2026] [security2:error] [pid 3360:tid 140594206627520] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /alamat-kantor-v1.html HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/alamat-kantor-v1.html"] [unique_id "aucZzw4mAT9T4X-1M0p0qQAAAAA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3493] [CN2Z0fS+DLs] [aucZzw4mAT9T4X-1M0p0qQAAAAA] keep_alive=[0] [2026-11-01 17:51:59.726836] [R:aucZzw4mAT9T4X-1M0p0qQAAAAA] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWeb
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-31 18:43:35
UTC ·
(1 week ago)
[Sun Nov 01 01:43:34.902041 2026] [security2:error] [pid 33553:tid 140141293205184] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset ...
show more
[Sun Nov 01 01:43:34.902041 2026] [security2:error] [pid 33553:tid 140141293205184] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/offline-artikel HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/offline-artikel"] [unique_id "auY21vDnC4038RLYMgvajgAAAMM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[33590] [aJdISqfcTEs] [auY21vDnC4038RLYMgvajgAAAMM] keep_alive=[0] [2026-11-01 01:43:34.902
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-31 11:00:21
UTC ·
(1 week ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.222 - - [31/Oct/2026:18:00:18 +0700] "GET /alamat-kantor-v1.html HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Tik ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.222 - - [31/Oct/2026:18:00:18 +0700] "GET /alamat-kantor-v1.html HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
🇲🇾
Rizzy
2026-10-31 05:38:50
UTC ·
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇮🇩
hermawan
2026-10-31 03:56:24
UTC ·
(1 week ago)
[Sat Oct 31 10:56:24.204334 2026] [authz_core:error] [pid 15327:tid 140403074397888] [client 47.128.120.222:0] AH01630: client denied by server configuration: /var/www/html/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[15449] [ ...
show more
[Sat Oct 31 10:56:24.204334 2026] [authz_core:error] [pid 15327:tid 140403074397888] [client 47.128.120.222:0] AH01630: client denied by server configuration: /var/www/html/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[15449] [K6h85RrT6Eg] [auVm6MhRMQL3aOuSLjyCfgAAAIU] keep_alive=[0] [2026-10-31 10:56:24.204344] [R:auVm6MhRMQL3aOuSLjyCfgAAAIU] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7' Accept-Encoding:'gzip, br Accept-Language:'en-US,en;q=0.5 Upgrade-Insecure-Requests:'1
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-29 12:49:37
UTC ·
(1 week ago)
[Thu Oct 29 19:49:36.243368 2026] [security2:error] [pid 4182:tid 140716709750464] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Thu Oct 29 19:49:36.243368 2026] [security2:error] [pid 4182:tid 140716709750464] [client 47.128.120.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-puncak-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-puncak-musim-hujan"] [unique_id "auNA4EOKTSA-XK0nxnExCQAAAFc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] to
...
show less
Email Spam
Hacking