๐ฎ๐ฉ
hermawan
2026-10-16 06:21:20
(2 hours ago)
[Fri Oct 16 13:21:20.178313 2026] [security2:error] [pid 15738:tid 140319702103744] [client 47.128.1 ...
show more
[Fri Oct 16 13:21:20.178313 2026] [security2:error] [pid 15738:tid 140319702103744] [client 47.128.120.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555563150-apa-itu-bediding: HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555563150-apa-itu-bediding:"] [unique_id "atHCYM_WLi-zIA25kG82cQAAAEU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[15770] [G+UvLO/Ud9g] [at
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-15 02:26:44
(1 day ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.237 - - [15/Oct/2026:09:26:36 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.237 - - [15/Oct/2026:09:26:36 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/peringatan-dini HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-15 01:59:10
(1 day ago)
[Thu Oct 15 08:59:09.476945 2026] [security2:error] [pid 16589:tid 139627566458560] [client 47.128.1 ...
show more
[Thu Oct 15 08:59:09.476945 2026] [security2:error] [pid 16589:tid 139627566458560] [client 47.128.120.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-prediksi-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-prediksi-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur"] [unique_id "atAzbb8Ow4Atz1JSQDkks
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-15 01:25:14
(1 day ago)
[Thu Oct 15 08:25:09.922405 2026] [security2:error] [pid 2917737:tid 140401692350144] [client 47.128 ...
show more
[Thu Oct 15 08:25:09.922405 2026] [security2:error] [pid 2917737:tid 140401692350144] [client 47.128.120.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555563405-press-release-kewaspadaan-peningkatan-kecepatan-angin-di-jawa-timur-12-14-september-2026 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555563405-
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-14 02:40:58
(2 days ago)
[Wed Oct 14 09:40:56.461108 2026] [security2:error] [pid 1824079:tid 140402246006464] [client 47.128 ...
show more
[Wed Oct 14 09:40:56.461108 2026] [security2:error] [pid 1824079:tid 140402246006464] [client 47.128.120.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prakiraan-musim/4372-prakiraan-musim-kemarau/prakiraan-curah-hujan-musim-kemarau/prakiraan-curah-hujan-musim-kemarau-di-propinsi-jawa-timur/prediksi-6-bulanan-curah-hujan-musim-kemarau-tahun-2026-zona-musim-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4372-prakiraan-musim-kemarau/prakiraan-curah-huja
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-14 01:58:29
(2 days ago)
[Wed Oct 14 08:58:24.958563 2026] [security2:error] [pid 1772475:tid 140619655567040] [client 47.128 ...
show more
[Wed Oct 14 08:58:24.958563 2026] [security2:error] [pid 1772475:tid 140619655567040] [client 47.128.120.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan-di-provinsi-jawa-timur"] [unique_id "as7hwAsb0I75jJX5jOncxwAAAIA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.i
...
show less
Email Spam
Hacking
๐ฉ๐ช
ghostwarriors
2026-10-11 06:50:13
(5 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
hermawan
2026-10-10 16:25:18
(5 days ago)
[Sat Oct 10 23:25:16.874893 2026] [security2:error] [pid 4443:tid 140629594052288] [client 47.128.12 ...
show more
[Sat Oct 10 23:25:16.874893 2026] [security2:error] [pid 4443:tid 140629594052288] [client 47.128.120.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan-di-provinsi-jawa-timur"] [unique_id "aspm7B44pzP3rJSoLgL3LAAAAI8"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id]
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-05 01:04:44
(1 week ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.237 - - [05/Oct/2026:08:04:07 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.237 - - [05/Oct/2026:08:04:07 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/peringatan-dini HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ช๐ธ
librebit
2026-10-03 09:53:39
(1 week ago)
Brute force
Brute-Force
๐ฎ๐ฉ
hermawan
2026-10-02 02:51:55
(2 weeks ago)
[Fri Oct 02 09:51:51.614618 2026] [security2:error] [pid 3051:tid 140167977354944] [client 47.128.12 ...
show more
[Fri Oct 02 09:51:51.614618 2026] [security2:error] [pid 3051:tid 140167977354944] [client 47.128.120.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-puncak-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-puncak-musim-hujan"] [unique_id "ar8cR2Fhl6bCvMCZXxWmMwAAAMo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] to
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-02 02:06:33
(2 weeks ago)
[Fri Oct 02 08:56:08.468022 2026] [security2:error] [pid 25742:tid 140681368557248] [client 47.128.1 ...
show more
[Fri Oct 02 08:56:08.468022 2026] [security2:error] [pid 25742:tid 140681368557248] [client 47.128.120.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-arti HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-arti"] [unique_id "ar8POPU8LLzjXUHUFwEtOwAAAEU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[25775] [Ylj/1dHBmQ0] [ar8POPU8LLzjXUHUFwEtOwAAAEU] keep_
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-10-01 03:16:38
(2 weeks ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.237 - - [01/Oct/2026:10:16:20 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.237 - - [01/Oct/2026:10:16:20 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/rilis-prediksi-musim-kemarau-tahun-2026-provinsi-jawa-timur HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-29 02:23:28
(2 weeks ago)
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.237 - - [29/Sep/2026:09:21:31 +0700] "GET /index ...
show more
Captured JA4H: ge11n_63cf1041adb5 | Log: 47.128.120.237 - - [29/Sep/2026:09:21:31 +0700] "GET /index.php/component/tags/tag/182 HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-09-28 03:29:54
(2 weeks ago)
[Mon Sep 28 10:25:14.620923 2026] [security2:error] [pid 2391191:tid 140463323465408] [client 47.128 ...
show more
[Mon Sep 28 10:25:14.620923 2026] [security2:error] [pid 2391191:tid 140463323465408] [client 47.128.120.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-klimatologi?start=1500 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-klimatologi"] [unique_id "arneGstYYPrWn8IGTAqzZwAAAYs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2391229] [0axJnQI/sk8] [arneGstYYPrWn8IGTAqzZwAAAYs] keep_alive=[0]
...
show less
Email Spam
Hacking