hermawan - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User hermawan , the webmaster of staklim-jatim.bmkg.go.id, joined AbuseIPDB in March 2018 and has reported 1,690,048 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇻🇳 116.98.104.198	03 Jul 2026	1783112717.996732 116.98.104.198 103.166.156.58 64240_2-1-3-1-1-4_1398_8 2026-07-04 04:05:17 WIB ...	Email Spam Hacking
🇺🇸 63.143.208.102	03 Jul 2026	[Sat Jul 04 04:05:23.441822 2026] [security2:error] [pid 620212:tid 140643622913728] [client 63.143. ... show more [Sat Jul 04 04:05:23.441822 2026] [security2:error] [pid 620212:tid 140643622913728] [client 63.143.208.102:56917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/informasi-iklim/analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan/555563233-analisis-dan-prediksi-dasarian-dinamika-atmosfer-laut-dan-prediksi-curah-hujan-pemutakhiran-dasarian-iii-juni-tahun-2026 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan/555563233-analisis-dan-prediksi-dasarian-dinamika-atmosfer-laut-dan-prediksi-curah-hujan-pemutakhiran-dasarian-iii-juni-tahun-20 ... show less	Email Spam Hacking
🇻🇳 14.186.226.242	03 Jul 2026	1783112669.032179 14.186.226.242 103.166.156.58 65535_2-1-3-1-1-4_1402_8 2026-07-04 04:04:29 WIB ...	Email Spam Hacking
🇺🇸 31.132.54.216	03 Jul 2026	[Sat Jul 04 04:04:01.651960 2026] [security2:error] [pid 620126:tid 140643656484544] [client 31.132. ... show more [Sat Jul 04 04:04:01.651960 2026] [security2:error] [pid 620126:tid 140643656484544] [client 31.132.54.216:45406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur"] [unique_id "akgjwcQwwP5ZWg_VTYLLbgAADAs"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[620165] [q1OUQ3v/bUs] [akgjwcQwwP5ZWg_VTYLLbgAADAs] keep_alive=[1] [2026-0 ... show less	Email Spam Hacking
🇪🇬 156.212.30.186	03 Jul 2026	1783112616.870622 156.212.30.186 103.166.156.58 64240_2-1-3-1-1-4_1432_8 2026-07-04 04:03:36 WIB ...	Email Spam Hacking
🇦🇷 45.184.229.88	03 Jul 2026	1783112603.715019 45.184.229.88 103.166.156.58 65535_2-4-8-1-3_1350_6 2026-07-04 04:03:23 WIB ...	Email Spam Hacking
🇺🇸 100.29.192.121	03 Jul 2026	07/04/2026-04:03:28.950025 [Drop] [] [1:921050:1] Suricata dibuat Gemini Suspicious SYN Scan (Fin ... show more 07/04/2026-04:03:28.950025 [Drop] [] [1:921050:1] Suricata dibuat Gemini Suspicious SYN Scan (Fingerprint: Win 65535, WS 256, MSS 1460) [**] [Classification: Attempted Information Leak] [Priority: 3] {TCP} 100.29.192.121:5139 -> 103.166.156.58:8088 ... show less	Email Spam Hacking
🇨🇦 209.216.103.146	03 Jul 2026	[Sat Jul 04 04:03:20.281401 2026] [security2:error] [pid 620212:tid 140643723626176] [client 209.216 ... show more [Sat Jul 04 04:03:20.281401 2026] [security2:error] [pid 620212:tid 140643723626176] [client 209.216.103.146:62094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur"] [unique_id "akgjmLmpjcS_vDp2_I5qqAAAkgM"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[620217] [SlIXQTsUbUs] [akgjmLmpjcS_vDp2_I5qqAAAkgM] keep_alive=[1] [2026-07- ... show less	Email Spam Hacking
🇲🇽 187.187.231.226	03 Jul 2026	[Sat Jul 04 04:02:50.941897 2026] [security2:error] [pid 620126:tid 140643606128320] [client 187.187 ... show more [Sat Jul 04 04:02:50.941897 2026] [security2:error] [pid 620126:tid 140643606128320] [client 187.187.231.226:59712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya"] [unique_id "akgjesQwwP5ZWg_VTYLLbAAABxE"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[620171] [Ue1IP7v4bUs] [akgjesQwwP5ZWg_VTYLLbAAABxE] keep_alive=[1] ... show less	Email Spam Hacking
🇸🇪 189.81.164.197	03 Jul 2026	[Sat Jul 04 04:02:43.831623 2026] [security2:error] [pid 620212:tid 140643480237760] [client 189.81. ... show more [Sat Jul 04 04:02:43.831623 2026] [security2:error] [pid 620212:tid 140643480237760] [client 189.81.164.197:23982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur/2026/06_Juni_2026/Das-I/Monitoring_dan_Prediksi_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur_Update_10_Juni_2026.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "akgjc7mpjcS_vDp2_I5qowAAAIY"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim- ... show less	Email Spam Hacking
🇧🇷 45.70.127.120	03 Jul 2026	[Sat Jul 04 04:02:15.770535 2026] [security2:error] [pid 620126:tid 140643505415872] [client 45.70.1 ... show more [Sat Jul 04 04:02:15.770535 2026] [security2:error] [pid 620126:tid 140643505415872] [client 45.70.127.120:53756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur/2026/06_Juni_2026/Das-I/Monitoring_dan_Prediksi_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur_Update_10_Juni_2026.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "akgjV8QwwP5ZWg_VTYLLawAAAAM"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [stakl ... show less	Email Spam Hacking
🇧🇷 170.239.195.84	03 Jul 2026	1783112528.773025 170.239.195.84 103.166.156.58 65535_2-4-8-1-3_1450_6 2026-07-04 04:02:08 WIB ...	Email Spam Hacking
🇮🇹 101.57.202.205	03 Jul 2026	[Sat Jul 04 04:02:00.348700 2026] [security2:error] [pid 620126:tid 140643715233472] [client 101.57. ... show more [Sat Jul 04 04:02:00.348700 2026] [security2:error] [pid 620126:tid 140643715233472] [client 101.57.202.205:1768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "akgjSMQwwP5ZWg_VTYLLagAAAAQ"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[620158] [UAdXPHv8bUs] [akgjSMQwwP5ZWg_VTYLLagAAAAQ] keep_alive=[1] [2026-07-04 04:02:00.348708] [R:akgjSMQwwP5ZWg_VTYLLagAAAAQ] UA ... show less	Email Spam Hacking
🇻🇳 14.225.57.40	03 Jul 2026	1783111617.673668 14.225.57.40 103.166.156.58 64240_2-4-8-1-3_1460_6 2026-07-04 03:46:57 WIB ...	Email Spam Hacking
🇬🇧 185.247.137.98	03 Jul 2026	07/04/2026-04:01:53.952140 [Drop] [] [1:3100023978:0] Suricata match TLS ja3 scan Uniq Zeek no 23 ... show more 07/04/2026-04:01:53.952140 [Drop] [] [1:3100023978:0] Suricata match TLS ja3 scan Uniq Zeek no 23978 with hash_7024ed8c0d80542d17159473f564b551 [**] [Classification: (null)] [Priority: 3] {TCP} 185.247.137.98:50855 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇲🇽 203.142.5.182	03 Jul 2026	1783112449.284019 203.142.5.182 103.166.156.58 29200_2-4-8-1-3_1412_7 2026-07-04 04:00:49 WIB ...	Email Spam Hacking
🇲🇽 203.142.5.184	03 Jul 2026	[Sat Jul 04 04:00:58.948855 2026] [security2:error] [pid 620212:tid 140643690055360] [client 203.142 ... show more [Sat Jul 04 04:00:58.948855 2026] [security2:error] [pid 620212:tid 140643690055360] [client 203.142.5.184:52064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur/2026/06_Juni_2026/Das-I/Monitoring_dan_Prediksi_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur_Update_10_Juni_2026.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "akgjCrmpjcS_vDp2_I5qfgAAgAc"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [s ... show less	Email Spam Hacking
🇧🇷 45.227.80.73	03 Jul 2026	[Sat Jul 04 04:00:47.113037 2026] [security2:error] [pid 620126:tid 140643732018880] [client 45.227. ... show more [Sat Jul 04 04:00:47.113037 2026] [security2:error] [pid 620126:tid 140643732018880] [client 45.227.80.73:38726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026"] [unique_id "akgi_8QwwP5ZWg_VTYLLTwAACwI"], referer https://www.bmkg.go.id/ ... show less	Email Spam Hacking
🇦🇺 49.196.39.49	03 Jul 2026	1783112422.193598 49.196.39.49 103.166.156.58 65535_2-1-3-1-1-8-4_1420_5 2026-07-04 04:00:22 WIB ...	Email Spam Hacking
🇧🇷 177.125.223.114	03 Jul 2026	1783112421.824387 177.125.223.114 103.166.156.58 64240_2-4-8-1-3_1440_7 2026-07-04 04:00:21 WIB ...	Email Spam Hacking
🇬🇧 5.252.83.162	03 Jul 2026	07/04/2026-03:59:29.802504 [Drop] [] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - W ... show more 07/04/2026-03:59:29.802504 [Drop] [] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - Win 65535 [**] [Classification: (null)] [Priority: 3] {TCP} 5.252.83.162:51528 -> 103.166.156.58:30006 ... show less	Email Spam Hacking
🇧🇷 45.175.48.224	03 Jul 2026	[Sat Jul 04 03:58:42.768991 2026] [security2:error] [pid 616952:tid 140643622913728] [client 45.175. ... show more [Sat Jul 04 03:58:42.768991 2026] [security2:error] [pid 616952:tid 140643622913728] [client 45.175.48.224:1491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "akgigo5dRgeqoTHssiOsggABEA8"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[616968] [lCGIMDu4XU0] [akgigo5dRgeqoTHssiOsggABEA8] keep_alive=[1] [2026-07-04 03:58:42.769008] [R:akgigo5dRgeqoTHssiOsggABEA8] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1' Host:'staklim-ja ... show less	Email Spam Hacking
🇧🇷 45.168.0.244	03 Jul 2026	[Sat Jul 04 03:58:22.670353 2026] [security2:error] [pid 617011:tid 140643690055360] [client 45.168. ... show more [Sat Jul 04 03:58:22.670353 2026] [security2:error] [pid 617011:tid 140643690055360] [client 45.168.0.244:5506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "akgibj7vbXfMqwWxZ7FbIAAAFgc"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[617020] [mSlXL7txXk0] [akgibj7vbXfMqwWxZ7FbIAAAFgc] keep_alive=[1] [2026-07-04 03:58:22.670361] [R:akgibj7vbXfMqwWxZ7FbIAAAFgc] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 16_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/122.2 Mobile/15E148 Safari/605.1.15' Host:'stakli ... show less	Email Spam Hacking
🇮🇳 103.211.43.74	03 Jul 2026	[Sat Jul 04 03:58:19.607770 2026] [security2:error] [pid 617019:tid 140643614521024] [client 103.211 ... show more [Sat Jul 04 03:58:19.607770 2026] [security2:error] [pid 617019:tid 140643614521024] [client 103.211.43.74:50263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur"] [unique_id "akgia6dGtusoLoU34teQZgAAUxA"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[617060] [t3UqL7t4Xk0] [akgia6dGtusoLoU34teQZgAAUxA] keep_alive=[1] [2026-07-04 03:58:19.607780] [R:akgia6dGtusoLoU34teQZgAAUxA] UA ... show less	Email Spam Hacking
🇻🇳 14.224.192.68	03 Jul 2026	1783112280.181211 14.224.192.68 103.166.156.58 65535_2-1-3-1-1-4_1398_8 2026-07-04 03:58:00 WIB ...	Email Spam Hacking