🇮🇩
hermawan
2026-10-17 07:18:36
(2 hours ago)
Captured JA4H: ge11n_04726067e501 | Log: 86.194.73.210 - - [17/Oct/2026:14:18:25 +0700] "GET /index. ...
show more
Captured JA4H: ge11n_04726067e501 | Log: 86.194.73.210 - - [17/Oct/2026:14:18:25 +0700] "GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/1.1" 200 17488 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-15 06:07:03
(2 days ago)
Captured JA4H: ge11n_56607cd03d9a | Log: 86.194.73.210 - - [15/Oct/2026:13:06:27 +0700] "GET /index. ...
show more
Captured JA4H: ge11n_56607cd03d9a | Log: 86.194.73.210 - - [15/Oct/2026:13:06:27 +0700] "GET /index.php/profil/meteorologi/list-all-categories HTTP/1.1" 200 38005 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 OPR/89.0.0.0" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,save-data,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-15 02:47:04
(2 days ago)
[Thu Oct 15 09:47:04.232403 2026] [security2:error] [pid 52733:tid 139627532887744] [client 86.194.7 ...
show more
[Thu Oct 15 09:47:04.232403 2026] [security2:error] [pid 52733:tid 139627532887744] [client 86.194.73.210:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_HEADERS:referer" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "475"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_HEADERS:referer: https://www.yahoo.go.id/ request_line = GET /images/offline/notif-pc-offline-2.jpg HTTP/1.1 Request URI RAW = /images/offline/notif-pc-offline-2.jpg Request Basename = notif-pc-offline-2.jpg"] [hostname "staklim-jat
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-11 00:05:39
(6 days ago)
[Sun Oct 11 07:05:38.772168 2026] [security2:error] [pid 365382:tid 140628872640192] [client 86.194. ...
show more
[Sun Oct 11 07:05:38.772168 2026] [security2:error] [pid 365382:tid 140628872640192] [client 86.194.73.210:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:referer: https://www.yandex.go.id/ request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "asrS0os5FNo6dBOUrnRSOwAAARc"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[365444] [vpBoVwW8YBs] [asrS0os5FNo6dBOUrnRSOwAAARc] keep_alive=[0] [2026-10-11 07:05:38.772173] [R:asrS0os5FNo6dBOUrnRSOwAAARc] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0 Teams/25227.203.3915.2444/
...
show less
Email Spam
Hacking