AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User hermawan , the webmaster of staklim-jatim.bmkg.go.id, joined AbuseIPDB in March 2018 and has reported 1,823,334 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇿🇦 160.226.171.59	02 Nov 2026	Captured JA4H: ge11n_56607cd03d9a \| Log: 160.226.171.59 - - [02/Nov/2026:11:29:36 +0700] "GET /index ... show more Captured JA4H: ge11n_56607cd03d9a \| Log: 160.226.171.59 - - [02/Nov/2026:11:29:36 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas HTTP/1.1" 200 18603 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.5467.55 Safari/537.36 OPR/85.0.3301.84" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,save-data,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry... ... show less	Email Spam Hacking
🇰🇷 118.128.214.4	02 Nov 2026	Captured JA4H: ge11n_36d8cc7db64c \| Log: 118.128.214.4 - - [02/Nov/2026:11:29:27 +0700] "GET /index. ... show more Captured JA4H: ge11n_36d8cc7db64c \| Log: 118.128.214.4 - - [02/Nov/2026:11:29:27 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/1.1" 200 17064 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/134.0.6998.33 Mobile/15E148 Safari/604.1" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇨🇱 181.42.209.3	02 Nov 2026	Captured JA4H: ge11n_4afaac0d80e2 \| Log: 181.42.209.3 - - [02/Nov/2026:11:29:22 +0700] "GET /index.p ... show more Captured JA4H: ge11n_4afaac0d80e2 \| Log: 181.42.209.3 - - [02/Nov/2026:11:29:22 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/1.1" 200 14367 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Mobile/15E148 Safari/604.1" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,cf-ipcountry... ... show less	Email Spam Hacking
🇺🇸 200.10.44.144	02 Nov 2026	[Mon Nov 02 11:29:24.351935 2026] [security2:error] [pid 38583:tid 139853714904768] [client 200.10.4 ... show more [Mon Nov 02 11:29:24.351935 2026] [security2:error] [pid 38583:tid 139853714904768] [client 200.10.44.144:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:referer: https://www.bing.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim"] [unique_id "augRpAN6JCMo0PGQL1gP3QAAAAw"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[38622] [LgMyl4P8qFw] [augRpAN6JCMo0PGQL1gP3QAAAAw] keep_alive=[0] [2026-11-02 11:29:24.351944] [R:augRpAN6JCMo0PGQL1gP3QAAAAw] UA:'Mozi ... show less	Email Spam Hacking
🇨🇷 186.15.101.91	02 Nov 2026	Captured JA4H: ge11n_4afaac0d80e2 \| Log: 186.15.101.91 - - [02/Nov/2026:11:28:37 +0700] "GET / HTTP/ ... show more Captured JA4H: ge11n_4afaac0d80e2 \| Log: 186.15.101.91 - - [02/Nov/2026:11:28:37 +0700] "GET / HTTP/1.1" 200 17254 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 19_0_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/385.0.802777482 Mobile/15E148 Safari/604.1" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 157.15.0.144	02 Nov 2026	[Mon Nov 02 11:28:44.585822 2026] [security2:error] [pid 38676:tid 139852616017600] [client 157.15.0 ... show more [Mon Nov 02 11:28:44.585822 2026] [security2:error] [pid 38676:tid 139852616017600] [client 157.15.0.144:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=476&id=1265%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-29-november-5-desember-2016&start=100 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=476&id=1265%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-29-november-5-..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "augRfHTnJ2AF8p ... show less	Email Spam Hacking
🇺🇸 172.252.155.94	02 Nov 2026	[Mon Nov 02 11:28:45.195661 2026] [security2:error] [pid 38676:tid 139852624410304] [client 172.252. ... show more [Mon Nov 02 11:28:45.195661 2026] [security2:error] [pid 38676:tid 139852624410304] [client 172.252.155.94:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=491&id=954%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-april-2016 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=491&id=954%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-april-2016 Request Basename = a..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "augRfXTnJ2AF ... show less	Email Spam Hacking
🇺🇸 96.255.38.170	02 Nov 2026	[Mon Nov 02 11:28:39.327053 2026] [security2:error] [pid 38636:tid 139852708304576] [client 96.255.3 ... show more [Mon Nov 02 11:28:39.327053 2026] [security2:error] [pid 38636:tid 139852708304576] [client 96.255.38.170:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=627&id=555555706%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-23-29-mei-2017&start=40 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=627&id=555555706%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-23-29-mei-2017&sta..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "augRd12-mvTjP ... show less	Email Spam Hacking
🇩🇴 38.129.160.35	02 Nov 2026	[Mon Nov 02 11:28:35.207622 2026] [security2:error] [pid 38636:tid 139852716697280] [client 38.129.1 ... show more [Mon Nov 02 11:28:35.207622 2026] [security2:error] [pid 38636:tid 139852716697280] [client 38.129.160.35:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "augRc12-mvTjP22kycvXKQAAAFE"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[38681] [8yFElEOlqFw] [augRc12-mvTjP22kycvXKQAAAFE] keep_alive=[0] [2026-11-02 11:28:35.207629] [R:augRc12-mvTjP22kycvXKQAAAFE] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 18_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/375.1.776343893 Mobile/15E148 Safari/604.1' Host:'staklim-jatim.bmkg.go.id' AC ... show less	Email Spam Hacking
🇩🇪 172.252.208.55	02 Nov 2026	[Mon Nov 02 11:28:33.266952 2026] [security2:error] [pid 38636:tid 139852725089984] [client 172.252. ... show more [Mon Nov 02 11:28:33.266952 2026] [security2:error] [pid 38636:tid 139852725089984] [client 172.252.208.55:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=483&id=1274%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-14-19-desember-2016&start=40 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=483&id=1274%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-14-19-desember-2016&sta..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "augRcV2-mvTj ... show less	Email Spam Hacking
🇺🇦 77.239.190.210	02 Nov 2026	Captured JA4H: ge11n_e12469f9b103 \| Log: 77.239.190.210 - - [02/Nov/2026:11:28:11 +0700] "GET / HTTP ... show more Captured JA4H: ge11n_e12469f9b103 \| Log: 77.239.190.210 - - [02/Nov/2026:11:28:11 +0700] "GET / HTTP/1.1" 200 14497 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/142.0.1 Mobile/15E148 Safari/605.1.15" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,cf-ipcountry... ... show less	Email Spam Hacking
🇫🇷 88.160.236.23	02 Nov 2026	[Mon Nov 02 11:28:31.402891 2026] [security2:error] [pid 38676:tid 139852649588416] [client 88.160.2 ... show more [Mon Nov 02 11:28:31.402891 2026] [security2:error] [pid 38676:tid 139852649588416] [client 88.160.236.23:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "augRb3TnJ2AF8pGq_g7GoAAAAVE"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[38733] [1xEKlENdqVw] [augRb3TnJ2AF8pGq_g7GoAAAAVE] keep_alive=[0] [2026-11-02 11:28:31.402898] [R:augRb3TnJ2AF8pGq_g7GoAAAAVE] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/140.0.3485.52 Version/18.0 Mobile/15E148 Safari/604.1' Host:'staklim-jatim. ... show less	Email Spam Hacking
🇮🇩 103.139.11.17	02 Nov 2026	[Mon Nov 02 11:28:32.134950 2026] [security2:error] [pid 38676:tid 139852641195712] [client 103.139. ... show more [Mon Nov 02 11:28:32.134950 2026] [security2:error] [pid 38676:tid 139852641195712] [client 103.139.11.17:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=486&id=945%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-5-11-april-2016&start=70 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=486&id=945%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-5-11-april-2016&start=70 Requ..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "augRcHTnJ2AF8 ... show less	Email Spam Hacking
🇺🇸 9.233.96.113	02 Nov 2026	[Mon Nov 02 11:28:31.265611 2026] [security2:error] [pid 38676:tid 139852657981120] [client 9.233.96 ... show more [Mon Nov 02 11:28:31.265611 2026] [security2:error] [pid 38676:tid 139852657981120] [client 9.233.96.113:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=471&id=784%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-3-9-nopember-2015&start=140 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=471&id=784%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-3-9-nopember-2015&start=14..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "augRb3TnJ2AF8p ... show less	Email Spam Hacking
🇮🇩 36.50.56.161	02 Nov 2026	[Mon Nov 02 11:28:31.040547 2026] [security2:error] [pid 38636:tid 139853628958400] [client 36.50.56 ... show more [Mon Nov 02 11:28:31.040547 2026] [security2:error] [pid 38636:tid 139853628958400] [client 36.50.56.161:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=618&id=2454%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-7-13-maret-2017&start=160 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=618&id=2454%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-7-13-maret-2017&start=160 ..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "augRb12-mvTjP2 ... show less	Email Spam Hacking
🇮🇳 157.49.37.185	02 Nov 2026	[Mon Nov 02 11:28:19.808550 2026] [security2:error] [pid 38676:tid 139853152888512] [client 157.49.3 ... show more [Mon Nov 02 11:28:19.808550 2026] [security2:error] [pid 38676:tid 139853152888512] [client 157.49.37.185:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "augRY3TnJ2AF8pGq_g7GnQAAAU4"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[38730] [JSZZkwNeqVw] [augRY3TnJ2AF8pGq_g7GnQAAAU4] keep_alive=[0] [2026-11-02 11:28:19.808558] [R:augRY3TnJ2AF8pGq_g7GnQAAAU4] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6355.59 Safari/537.36 OPR/85.0.3101.43' Host:'staklim-jatim.bmkg.go.id' A ... show less	Email Spam Hacking
🇧🇷 179.93.154.153	02 Nov 2026	[Mon Nov 02 11:27:18.887271 2026] [security2:error] [pid 38676:tid 139852649588416] [client 179.93.1 ... show more [Mon Nov 02 11:27:18.887271 2026] [security2:error] [pid 38676:tid 139852649588416] [client 179.93.154.153:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:referer: https://www.bing.go.id/ request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "augRJnTnJ2AF8pGq_g7GdAAAAVE"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[38733] [hpC3j0NdqVw] [augRJnTnJ2AF8pGq_g7GdAAAAVE] keep_alive=[0] [2026-11-02 11:27:18.887278] [R:augRJnTnJ2AF8pGq_g7GdAAAAVE] UA:'Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 Edg/122.0.0.0' Host:'staklim-jatim.bmkg.go.id' ... show less	Email Spam Hacking
🇺🇾 179.26.49.84	02 Nov 2026	[Mon Nov 02 11:26:54.361835 2026] [security2:error] [pid 38636:tid 139853612172992] [client 179.26.4 ... show more [Mon Nov 02 11:26:54.361835 2026] [security2:error] [pid 38636:tid 139853612172992] [client 179.26.49.84:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "augRDl2-mvTjP22kycvXEQAAAE8"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[38679] [i1ZBjsOmqFw] [augRDl2-mvTjP22kycvXEQAAAE8] keep_alive=[0] [2026-11-02 11:26:54.3 ... show less	Email Spam Hacking
🇺🇾 186.49.161.175	02 Nov 2026	[Mon Nov 02 11:26:46.861266 2026] [security2:error] [pid 38636:tid 139853628958400] [client 186.49.1 ... show more [Mon Nov 02 11:26:46.861266 2026] [security2:error] [pid 38636:tid 139853628958400] [client 186.49.161.175:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 16; Pixel 7 Pro Build/BP2A.250805.005; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "augRBl2-mvTjP22kycvXDgAAAE0"], referer https://stakli ... show less	Email Spam Hacking
🇧🇩 103.184.24.102	02 Nov 2026	Captured JA4H: ge11n_4afaac0d80e2 \| Log: 103.184.24.102 - - [02/Nov/2026:11:26:14 +0700] "GET /index ... show more Captured JA4H: ge11n_4afaac0d80e2 \| Log: 103.184.24.102 - - [02/Nov/2026:11:26:14 +0700] "GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/1.1" 200 17962 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,cf-ipcountry... ... show less	Email Spam Hacking
🇭🇰 180.188.173.226	02 Nov 2026	Captured JA4H: ge11n_e12469f9b103 \| Log: 180.188.173.226 - - [02/Nov/2026:11:26:12 +0700] "GET /inde ... show more Captured JA4H: ge11n_e12469f9b103 \| Log: 180.188.173.226 - - [02/Nov/2026:11:26:12 +0700] "GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/1.1" 200 14218 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/138.0 Mobile/15E148 Safari/605.1.15" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,cf-ipcountry... ... show less	Email Spam Hacking
🇦🇷 181.114.156.131	02 Nov 2026	[Mon Nov 02 11:26:33.446273 2026] [security2:error] [pid 38676:tid 139852657981120] [client 181.114. ... show more [Mon Nov 02 11:26:33.446273 2026] [security2:error] [pid 38676:tid 139852657981120] [client 181.114.156.131:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 13; SM-A426U Build/TP1A.220624.014; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "augQ-XTnJ2AF8pGq_g7GXAAAAVA"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[38732] [DDMCjYNeqVw] [augQ-XTnJ2AF8pGq_g7GXAAAAVA] keep_alive=[0] [2026-11-02 11:26:33.446282] [R:augQ-XTnJ2AF8pGq_g7GXAAAAVA] UA ... show less	Email Spam Hacking
🇧🇷 179.0.163.255	02 Nov 2026	[Mon Nov 02 11:26:29.306183 2026] [security2:error] [pid 38583:tid 139853790439104] [client 179.0.16 ... show more [Mon Nov 02 11:26:29.306183 2026] [security2:error] [pid 38583:tid 139853790439104] [client 179.0.163.255:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 15; SM-A156U1 Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "augQ9QN6JCMo0PGQL1gPvQAAAAM"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[38613] [HgfDjMP6qFw] [augQ9QN6JCMo0PGQL1gPvQAAAAM] keep_alive=[0] [2026-11-02 11:26:29.306189] [R:augQ9QN6JCMo0PGQL1gPvQAAAAM] ... show less	Email Spam Hacking
🇧🇩 103.174.214.249	02 Nov 2026	Captured JA4H: ge11n_133fd66ef233 \| Log: 103.174.214.249 - - [02/Nov/2026:11:26:24 +0700] "GET /inde ... show more Captured JA4H: ge11n_133fd66ef233 \| Log: 103.174.214.249 - - [02/Nov/2026:11:26:24 +0700] "GET /index.php HTTP/1.1" 200 14441 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Linux; U; Android 14; SM-A065F Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/139.0.7258.158 Mobile Safari/537.36 OPR/94.0.2254.78758" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,save-data,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry... ... show less	Email Spam Hacking
🇨🇦 170.52.111.119	02 Nov 2026	Captured JA4H: ge11n_4afaac0d80e2 \| Log: 170.52.111.119 - - [02/Nov/2026:11:26:15 +0700] "GET /index ... show more Captured JA4H: ge11n_4afaac0d80e2 \| Log: 170.52.111.119 - - [02/Nov/2026:11:26:15 +0700] "GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/1.1" 200 16865 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/353.1.720279278 Mobile/15E148 Safari/604.1" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,cf-ipcountry... ... show less	Email Spam Hacking