๐ฆ๐ท
190.17.46.157
1 hour ago
[Sat Oct 31 20:42:56.795411 2026] [security2:error] [pid 136928:tid 140161627190976] [client 190.17. ...
show more
[Sat Oct 31 20:42:56.795411 2026] [security2:error] [pid 136928:tid 140161627190976] [client 190.17.46.157:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "475"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_LINE: GET /favicon.ico HTTP/1.1 request_line = GET /favicon.ico HTTP/1.1 Request URI RAW = /favicon.ico Request Basename = favicon.ico"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/favicon.ico"] [unique_id "auXwYOXylm7qAR6lkUws8wAAAJA"], ref
...
show less
Email Spam
Hacking
๐บ๐ธ
2a03:2880:f800:17::
1 hour ago
[Sat Oct 31 20:42:50.625477 2026] [security2:error] [pid 136977:tid 140161509725888] [client 2a03:28 ...
show more
[Sat Oct 31 20:42:50.625477 2026] [security2:error] [pid 136977:tid 140161509725888] [client 2a03:2880:f800:17:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/component/tags/tag/prakiraan-cuaca-pacitan?format=feed& HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/prakiraan-cuaca-pacitan"] [unique_id "auXwWpfV3-3wc1sPmr9JJAAAANY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[137030] [Q8
...
show less
Email Spam
Hacking
๐บ๐ธ
52.167.144.150
1 hour ago
[Sat Oct 31 20:42:42.152087 2026] [security2:error] [pid 136928:tid 140162222778048] [client 52.167. ...
show more
[Sat Oct 31 20:42:42.152087 2026] [security2:error] [pid 136928:tid 140162222778048] [client 52.167.144.150:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:from" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "153"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,accept,accept-encoding,user-agent,from,cf-ray,cdn-loop,cf-connecting-ip,cf-ipcountry,cf-visitor found within REQUEST_HEADERS:from: bingbot(at)microsoft.com request_line = GET /index.php/profil/meteorologi/list-all-categories/347-profil-kantor/pengaduan/124-pengaduan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/347-profil-kantor/pengaduan/124-pengaduan"] [unique_id "auXwUuXylm7qAR6lkUws7QAAAIo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bm
...
show less
Email Spam
Hacking
๐บ๐ธ
185.191.171.8
1 hour ago
[Sat Oct 31 20:42:36.347260 2026] [security2:error] [pid 136928:tid 140162231170752] [client 185.191 ...
show more
[Sat Oct 31 20:42:36.347260 2026] [security2:error] [pid 136928:tid 140162231170752] [client 185.191.171.8:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "166"] [id "913102"] [msg "Found User-Agent associated with web crawler/bot"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: SemrushBot found within REQUEST_HEADERS:user-agent: mozilla/5.0 (compatible; semrushbot/7~bl; +http://www.semrush.com/bot.html) request_line = GET /index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/159-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2016/917-analisis-dinamika-atmosfer-dan-laut-dasarian-ii-pebruari-2016 HTTP/1.1 Request URI RAW = /index.php/analisis-kondisi-dinamika-at..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-
...
show less
Email Spam
Hacking
๐ป๐ณ
14.189.136.39
1 hour ago
Captured JA4H: ge11n_6095c6f1f3d8 | Log: 14.189.136.39 - - [31/Oct/2026:20:42:02 +0700] "GET /index. ...
show more
Captured JA4H: ge11n_6095c6f1f3d8 | Log: 14.189.136.39 - - [31/Oct/2026:20:42:02 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur HTTP/1.1" 200 17934 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Mobile/15E148 Safari/604.1 OPT/5.3.0" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-site,cf-ew-via,cdn-loop,sec-fetch-mode,sec-fetch-dest,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,cf-visitor,cf-ipcountry...
...
show less
Email Spam
Hacking
๐บ๐ธ
74.7.242.171
1 hour ago
[Sat Oct 31 20:41:36.749239 2026] [security2:error] [pid 136875:tid 140162742863552] [client 74.7.24 ...
show more
[Sat Oct 31 20:41:36.749239 2026] [security2:error] [pid 136875:tid 140162742863552] [client 74.7.242.171:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:from" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "153"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,accept-encoding,accept,user-agent,from,cf-ray,x-openai-host-hash,cdn-loop,cf-connecting-ip,cf-ipcountry,cf-visitor found within REQUEST_HEADERS:from: oai-searchbot(at)openai.com request_line = GET /index.php/profil/meteorologi/list-all-categories/4161-klimatologi/analisis-klimatologi/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa-timur/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all
...
show less
Email Spam
Hacking
๐ฒ๐พ
9.129.55.128
1 hour ago
[Sat Oct 31 20:41:30.805897 2026] [security2:error] [pid 136928:tid 140162726078144] [client 9.129.5 ...
show more
[Sat Oct 31 20:41:30.805897 2026] [security2:error] [pid 136928:tid 140162726078144] [client 9.129.55.128:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555563358-prediksi-bulanan-curah-hujan-bulan-oktober-tahun-2026-update-dari-analisis-bulan-juli-tahun-2026-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555563358-prediksi-bulanan-curah-hujan-bulan-oktober-tahun-2026-update-dari-analisis-bulan
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
114.12.15.199
1 hour ago
[Sat Oct 31 20:41:17.005445 2026] [security2:error] [pid 136928:tid 140162845525696] [client 114.12. ...
show more
[Sat Oct 31 20:41:17.005445 2026] [security2:error] [pid 136928:tid 140162845525696] [client 114.12.15.199:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=639&id=555555602%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-11-17-april-2017&start=30 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=639&id=555555602%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-11-17-april-2017..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "auXv_eXylm7q
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
103.81.195.102
1 hour ago
[Sat Oct 31 20:41:16.942217 2026] [security2:error] [pid 136875:tid 140162845525696] [client 103.81. ...
show more
[Sat Oct 31 20:41:16.942217 2026] [security2:error] [pid 136875:tid 140162845525696] [client 103.81.195.102:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 7% found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=635&id=555555587%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-maret-3-april-2017&start=10 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=635&id=555555587%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-maret-3-a..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "auXv_IrYB07
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
114.5.111.91
1 hour ago
[Sat Oct 31 20:41:00.980456 2026] [security2:error] [pid 132341:tid 140162499606208] [client 114.5.1 ...
show more
[Sat Oct 31 20:41:00.980456 2026] [security2:error] [pid 132341:tid 140162499606208] [client 114.5.111.91:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "475"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_LINE: GET /Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp HTTP/1.1 request_line = GET /Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp HTTP/1.1 Request URI RAW = /Whatsapp_Kantor_BMKG_Malang_Stasiun
...
show less
Email Spam
Hacking
๐จ๐ด
181.235.178.96
1 hour ago
Captured JA4H: ge11n_4afaac0d80e2 | Log: 181.235.178.96 - - [31/Oct/2026:20:40:10 +0700] "GET /index ...
show more
Captured JA4H: ge11n_4afaac0d80e2 | Log: 181.235.178.96 - - [31/Oct/2026:20:40:10 +0700] "GET /index.php HTTP/1.1" 200 17327 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/142.0.1 Mobile/15E148 Safari/605.1.15" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ช๐ธ
185.155.21.208
1 hour ago
Captured JA4H: ge11n_9320ec489e62 | Log: 185.155.21.208 - - [31/Oct/2026:20:40:11 +0700] "GET / HTTP ...
show more
Captured JA4H: ge11n_9320ec489e62 | Log: 185.155.21.208 - - [31/Oct/2026:20:40:11 +0700] "GET / HTTP/1.1" 200 17327 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Mobile Safari/537.36 EdgA/126.0.0.0" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐บ๐ฆ
31.43.51.195
1 hour ago
[Sat Oct 31 20:40:04.371842 2026] [security2:error] [pid 132445:tid 140162130491072] [client 31.43.5 ...
show more
[Sat Oct 31 20:40:04.371842 2026] [security2:error] [pid 132445:tid 140162130491072] [client 31.43.51.195:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story"] [unique_id "auXvtG3aXXzG7VZ1-Tgb5wAAAM0"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[132487] [6/TZDCMndUU] [auXvtG3aXXzG7VZ1-Tgb5wAAAM0] keep_alive=[0] [2026-10-31 20:40:04.371851] [R:auXvtG3aXXzG7VZ1-Tgb5wAAAM0] UA:'Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Bu
...
show less
Email Spam
Hacking
๐ง๐ท
177.21.140.191
1 hour ago
Captured JA4H: ge11n_9320ec489e62 | Log: 177.21.140.191 - - [31/Oct/2026:20:39:13 +0700] "GET / HTTP ...
show more
Captured JA4H: ge11n_9320ec489e62 | Log: 177.21.140.191 - - [31/Oct/2026:20:39:13 +0700] "GET / HTTP/1.1" 200 17636 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Mobile Safari/537.36 EdgA/125.0.0.0" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐บ๐ธ
2a03:2880:f800:10::
1 hour ago
[Sat Oct 31 20:39:50.518508 2026] [security2:error] [pid 132445:tid 140162751256256] [client 2a03:28 ...
show more
[Sat Oct 31 20:39:50.518508 2026] [security2:error] [pid 132445:tid 140162751256256] [client 2a03:2880:f800:10:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /b/bulanankediri.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulanankediri.pdf"] [unique_id "auXvpm3aXXzG7VZ1-Tgb4AAAAMQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[132478] [eJIGDOMgdUU] [auXvpm3aXXzG7VZ1-Tgb4AAAAMQ] keep_alive=[0] [2026-10-31 20:39:50.518517] [R:
...
show less
Email Spam
Hacking
๐ฉ๐ฟ
41.108.250.68
1 hour ago
[Sat Oct 31 20:39:42.168293 2026] [security2:error] [pid 132445:tid 140162734470848] [client 41.108. ...
show more
[Sat Oct 31 20:39:42.168293 2026] [security2:error] [pid 132445:tid 140162734470848] [client 41.108.250.68:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 11; SM-A105FN Build/RP1A.200720.012; ) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/139.0.7258.158 Mobile Safari/537.36 BingSapphire/32.3.430811005 request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karang
...
show less
Email Spam
Hacking
๐บ๐ธ
45.41.140.229
1 hour ago
[Sat Oct 31 20:39:37.749593 2026] [security2:error] [pid 132445:tid 140161610405568] [client 45.41.1 ...
show more
[Sat Oct 31 20:39:37.749593 2026] [security2:error] [pid 132445:tid 140161610405568] [client 45.41.140.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 14; SM-A135F Build/UP1A.231005.007; ) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/139.0.7258.160 Mobile Safari/537.36 BingSapphire/32.3.430811005 request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangp
...
show less
Email Spam
Hacking
๐ง๐ท
201.49.230.30
1 hour ago
Captured JA4H: ge11n_9320ec489e62 | Log: 201.49.230.30 - - [31/Oct/2026:20:38:55 +0700] "GET / HTTP/ ...
show more
Captured JA4H: ge11n_9320ec489e62 | Log: 201.49.230.30 - - [31/Oct/2026:20:38:55 +0700] "GET / HTTP/1.1" 200 17350 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Mobile Safari/537.36 OPR/84.0.0.0" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
๐ฌ๐ง
86.179.3.122
1 hour ago
[Sat Oct 31 20:39:07.231914 2026] [security2:error] [pid 132445:tid 140162734470848] [client 86.179. ...
show more
[Sat Oct 31 20:39:07.231914 2026] [security2:error] [pid 132445:tid 140162734470848] [client 86.179.3.122:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 14; SM-A525F Build/UP1A.231005.007; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "auXve23aXXzG7VZ1-TgbwgAAAMY"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[132480] [khJyCWMhdUU] [auXve23aXXzG7VZ1-TgbwgAAAMY] keep_alive=[0] [2026-10-31 20:39:07.231922] [R:auXve23aXXzG7VZ1-TgbwgAAAMY] UA:'Mozilla/5.0 (Linu
...
show less
Email Spam
Hacking
๐ป๐ณ
113.166.165.79
1 hour ago
[Sat Oct 31 20:39:01.124191 2026] [security2:error] [pid 132341:tid 140162449249984] [client 113.166 ...
show more
[Sat Oct 31 20:39:01.124191 2026] [security2:error] [pid 132341:tid 140162449249984] [client 113.166.165.79:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 15; SM-A156U1 Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "auXvdQKr_bP-T11_2l49vgAAAA8"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[132383] [Q98UCaOPdEU] [auXvdQKr_bP-T11_2l49vgAAAA8] keep_alive=[0] [2026-10-31 20:39:01.124200] [R:auXvdQKr_bP-T11_2l49vgAAAA8] UA:'Mozilla/5.0
...
show less
Email Spam
Hacking
๐ฎ๐ณ
171.61.168.123
1 hour ago
Captured JA4H: ge11n_e12469f9b103 | Log: 171.61.168.123 - - [31/Oct/2026:20:38:34 +0700] "GET /index ...
show more
Captured JA4H: ge11n_e12469f9b103 | Log: 171.61.168.123 - - [31/Oct/2026:20:38:34 +0700] "GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/1.1" 200 19033 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_0_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/385.0.802777482 Mobile/15E148 Safari/604.1" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,cf-ipcountry...
...
show less
Email Spam
Hacking
๐บ๐ธ
40.77.167.18
1 hour ago
[Sat Oct 31 20:38:30.618162 2026] [security2:error] [pid 132445:tid 140162734470848] [client 40.77.1 ...
show more
[Sat Oct 31 20:38:30.618162 2026] [security2:error] [pid 132445:tid 140162734470848] [client 40.77.167.18:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:from" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "153"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,user-agent,accept,from,accept-encoding,cf-ray,cdn-loop,cf-connecting-ip,cf-ipcountry,cf-visitor found within REQUEST_HEADERS:from: bingbot(at)microsoft.com request_line = GET /index.php/component/tags/tag/klimatologi HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/klimatologi"] [unique_id "auXvVm3aXXzG7VZ1-TgbqgAAAMY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[132480] [BmdDB2MhdUU] [auXvVm3aXXzG7VZ1-TgbqgAAAMY] keep_alive=[0] [2026-10-31 20:38:30
...
show less
Email Spam
Hacking
๐จ๐ฆ
143.105.205.151
1 hour ago
Captured JA4H: ge11n_4afaac0d80e2 | Log: 143.105.205.151 - - [31/Oct/2026:20:38:20 +0700] "GET /inde ...
show more
Captured JA4H: ge11n_4afaac0d80e2 | Log: 143.105.205.151 - - [31/Oct/2026:20:38:20 +0700] "GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/1.1" 200 17144 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.65 Version/17.0 Mobile/15E148 Safari/604.1" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,cf-ipcountry...
...
show less
Email Spam
Hacking
๐น๐ณ
196.235.151.147
1 hour ago
[Sat Oct 31 20:37:53.392237 2026] [security2:error] [pid 132389:tid 140162726078144] [client 196.235 ...
show more
[Sat Oct 31 20:37:53.392237 2026] [security2:error] [pid 132389:tid 140162726078144] [client 196.235.151.147:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 15; SM-G998U Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "auXvMWLLHVNbVtsDEE14GgAAAIc"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[132428] [il0LBaNZdUU] [auXvMWLLHVNbVtsDEE14GgAAAIc] keep_alive=[0] [2026-10-31 20:37:53.392244] [R:auXvMWLLHVNbVtsDEE14GgAAAI
...
show less
Email Spam
Hacking
๐บ๐ธ
68.119.203.4
1 hour ago
Captured JA4H: ge11n_133fd66ef233 | Log: 68.119.203.4 - - [31/Oct/2026:20:37:12 +0700] "GET /index.p ...
show more
Captured JA4H: ge11n_133fd66ef233 | Log: 68.119.203.4 - - [31/Oct/2026:20:37:12 +0700] "GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/1.1" 200 17959 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Linux, Android 15, SM-S926U Build/AP3A.240905.015.A2, ) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/139.0.7258.158 Mobile Safari/537.36 musical_ly_2024105040 JsSdk/1.0 NetType/MOBILE Channel/googleplay AppName/musical_ly app_ver" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,save-data,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking