๐ฎ๐ฉ
hermawan
2026-10-17 01:43:09
(13 hours ago)
[Sat Oct 17 08:43:08.746236 2026] [security2:error] [pid 10200:tid 140148490606272] [client 47.128.1 ...
show more
[Sat Oct 17 08:43:08.746236 2026] [security2:error] [pid 10200:tid 140148490606272] [client 47.128.120.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/3965-klimatologi/infografis/infografis-klimatologi/555563373-mengenal-faktor-pengendali-iklim-di-indonesia HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/3965-klimatologi/infografis/infografis-klimatologi/555563373-mengenal-faktor-pengendali-iklim-di-indonesia"] [un
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-17 01:11:02
(14 hours ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.229 - - [17/Oct/2026:08:10:43 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.229 - - [17/Oct/2026:08:10:43 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555560281-mengenal-fenomena-el-nino-yang-mengancam-indonesia:@Mengenal HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-16 06:12:38
(1 day ago)
[Fri Oct 16 13:12:36.871338 2026] [security2:error] [pid 8376:tid 140319156840128] [client 47.128.12 ...
show more
[Fri Oct 16 13:12:36.871338 2026] [security2:error] [pid 8376:tid 140319156840128] [client 47.128.120.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/infografis-bulanan-iklim-ekstrim-tahun-2025 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/infografis-bulanan-iklim-ekstrim-tahun-2025"] [unique_id "atHAVG9MYZk0aXU3gSESEAAAAJQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[8430] [hvn+DC+zetg] [atHAVG9MYZk0aX
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-15 02:28:50
(2 days ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.229 - - [15/Oct/2026:09:28:42 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.229 - - [15/Oct/2026:09:28:42 +0700] "GET /index.php/prakiraan-musim/4372-prakiraan-musim-kemarau/prakiraan-curah-hujan-musim-kemarau/prakiraan-curah-hujan-musim-kemarau-di-propinsi-jawa-timur/prediksi-6-bulanan-curah-hujan-musim-kemarau-tahun-2026-zona-musim-di-provinsi-jawa-timur HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-15 01:46:44
(2 days ago)
[Thu Oct 15 08:46:43.281760 2026] [security2:error] [pid 12641:tid 139626987624128] [client 47.128.1 ...
show more
[Thu Oct 15 08:46:43.281760 2026] [security2:error] [pid 12641:tid 139626987624128] [client 47.128.120.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/4190 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/4190"] [unique_id "atAwg-zaQ9flysTklOxE9AAAAE8"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[12721] [lxw/OFfZyK8] [atAwg-zaQ9flysTklOxE9AAAAE8] keep_alive=[0] [2026-10-15 08:46:43.281768] [R:atAwg-zaQ9flys
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-14 02:38:39
(3 days ago)
[Wed Oct 14 09:38:35.455430 2026] [security2:error] [pid 1822600:tid 140402698983104] [client 47.128 ...
show more
[Wed Oct 14 09:38:35.455430 2026] [security2:error] [pid 1822600:tid 140402698983104] [client 47.128.120.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/offline-artikel HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/offline-artikel"] [unique_id "as7rK_yeWk9kIGNp9m9xMgAAAEs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1822639] [fKnn00OxxTU] [as7rK_yeWk9kIGNp9m9xMgAAAEs] keep_alive=[0] [2026-10-14 09:38:35
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-14 02:01:09
(3 days ago)
[Wed Oct 14 09:00:57.043792 2026] [security2:error] [pid 1773898:tid 140619544508096] [client 47.128 ...
show more
[Wed Oct 14 09:00:57.043792 2026] [security2:error] [pid 1773898:tid 140619544508096] [client 47.128.120.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/4380-klimatologi/infografis/infografis-klimatologi/infografis-harian/suhu-minimum-harian-di-jawa-timur/suhu-minimum-harian-di-jawa-timur-tahun-2026/555563338-suhu-minimum-harian-di-jawa-timur-tanggal-15-agustus-2026-pukul-07-01-wi..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-cat
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-10 16:31:06
(6 days ago)
[Sat Oct 10 23:31:05.824823 2026] [security2:error] [pid 11264:tid 140629837342400] [client 47.128.1 ...
show more
[Sat Oct 10 23:31:05.824823 2026] [security2:error] [pid 11264:tid 140629837342400] [client 47.128.120.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan-di-provinsi-jawa-timur"] [unique_id "aspoSXcnRyYSq6LxBGTm8AAAAFI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id]
...
show less
Email Spam
Hacking
Anonymous
2026-10-08 19:17:15
(1 week ago)
IP matched detection query many 3xx errors.
Brute-Force
๐ฎ๐ฉ
hermawan
2026-10-05 01:28:34
(1 week ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.229 - - [05/Oct/2026:08:27:46 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.229 - - [05/Oct/2026:08:27:46 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-05 00:59:38
(1 week ago)
[Mon Oct 05 07:59:36.115293 2026] [security2:error] [pid 3517:tid 140225663604416] [client 47.128.12 ...
show more
[Mon Oct 05 07:59:36.115293 2026] [security2:error] [pid 3517:tid 140225663604416] [client 47.128.120.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "asL2eJ0OYCikU3kCbe00AwAAAIQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3548] [PDhSZc2iIe4] [asL2eJ0OYCikU3kCbe00AwAAAIQ] keep_alive=[0] [2026-10-05 07:59:36.115300] [R:asL2eJ0OYCikU3kCbe00AwAAAIQ] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safa
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-02 02:50:40
(2 weeks ago)
[Fri Oct 02 09:50:35.483704 2026] [security2:error] [pid 2944:tid 140167882979008] [client 47.128.12 ...
show more
[Fri Oct 02 09:50:35.483704 2026] [security2:error] [pid 2944:tid 140167882979008] [client 47.128.120.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/infografis-klimat-story HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/infografis-klimat-story"] [unique_id "ar8b-7uPGpFJAbe8QCMbqQAAAFA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2988] [/Qu6mBJpFos] [ar8b-7uPGpFJAbe8QCMbqQAAAFA] keep_alive=[0] [2026-10-0
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-02 02:02:09
(2 weeks ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.229 - - [02/Oct/2026:08:58:35 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.229 - - [02/Oct/2026:08:58:35 +0700] "GET /index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-arti HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-01 03:23:54
(2 weeks ago)
[Thu Oct 01 10:23:28.322177 2026] [security2:error] [pid 30866:tid 140213745514176] [client 47.128.1 ...
show more
[Thu Oct 01 10:23:28.322177 2026] [security2:error] [pid 30866:tid 140213745514176] [client 47.128.120.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/4308 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/4308"] [unique_id "ar3SMGg50PaAiV5PswlFkQAAAEA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[30971] [lM558H5PbR8] [ar3SMGg50PaAiV5PswlFkQAAAEA] keep_alive=[0] [2026-10-01 10:23:28.322181] [R:ar3SMGg50PaAiV
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-29 02:21:28
(2 weeks ago)
[Tue Sep 29 09:20:07.719951 2026] [security2:error] [pid 43691:tid 140027157780160] [client 47.128.1 ...
show more
[Tue Sep 29 09:20:07.719951 2026] [security2:error] [pid 43691:tid 140027157780160] [client 47.128.120.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php?id=1136 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "arsgVyw5JLrN-iueYe9x_wAAAE0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[43751] [5nZC0pWyjcs] [arsgVyw5JLrN-iueYe9x_wAAAE0] keep_alive=[0] [2026-09-29 09:20:07.719957] [R:arsgVyw5JLrN-iueYe9x_wAAAE0] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KH
...
show less
Email Spam
Hacking