|
๐ฌ๐ง
45.82.76.111
|
|
1783112219.901468 45.82.76.111 103.166.156.58 64240_2_1460_0 2026-07-04 03:56:59 WIB
...
|
Email Spam
Hacking
|
|
๐ง๐ท
168.196.217.23
|
|
[Sat Jul 04 03:57:03.346843 2026] [security2:error] [pid 617019:tid 140643639699136] [client 168.196 ...
show more
[Sat Jul 04 03:57:03.346843 2026] [security2:error] [pid 617019:tid 140643639699136] [client 168.196.217.23:37136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas"] [unique_id "akgiH6dGtusoLoU34teQYAAAWA0"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[617054] [d8OTKjt5Xk0] [akgiH6dGtusoLoU34teQYAAAWA0] keep_alive=
...
show less
|
Email Spam
Hacking
|
|
๐บ๐ธ
44.1.99.194
|
|
07/04/2026-03:57:02.764220 [Drop] [**] [1:921747:0] Suricata Dibuat Gemini GRE Tunnel Traffic Detec ...
show more
07/04/2026-03:57:02.764220 [Drop] [**] [1:921747:0] Suricata Dibuat Gemini GRE Tunnel Traffic Detected [**] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {GRE} 44.1.99.194:0 -> 103.166.156.58:0
...
show less
|
Email Spam
Hacking
|
|
๐บ๐ธ
172.59.211.24
|
|
1783112156.348438 172.59.211.24 103.166.156.58 65535_2-4-8-1-3_1356_6 2026-07-04 03:55:56 WIB
...
|
Email Spam
Hacking
|
|
๐ฉ๐ช
92.208.20.139
|
|
1783112155.271490 92.208.20.139 103.166.156.58 64240_2-4-8-1-3_1420_7 2026-07-04 03:55:55 WIB
...
|
Email Spam
Hacking
|
|
๐บ๐ธ
158.94.187.189
|
|
1783112136.019774 158.94.187.189 103.166.156.58 8192_2_1460_0 2026-07-04 03:55:36 WIB
...
|
Email Spam
Hacking
|
|
๐จ๐ณ
101.207.217.122
|
|
1783112134.865759 101.207.217.122 103.166.156.58 65535_2-4-8-1-3_1452_4 2026-07-04 03:55:34 WIB
...
|
Email Spam
Hacking
|
|
๐จ๐ณ
183.198.200.111
|
|
1783112132.617639 183.198.200.111 103.166.156.58 65535_2-4-8-1-3_1440_4 2026-07-04 03:55:32 WIB
...
|
Email Spam
Hacking
|
|
๐จ๐ณ
183.216.132.244
|
|
1783112131.461544 183.216.132.244 103.166.156.58 29200_2-4-8-1-3_1412_6 2026-07-04 03:55:31 WIB
...
|
Email Spam
Hacking
|
|
๐จ๐ฆ
142.112.146.192
|
|
1783112115.836147 142.112.146.192 103.166.156.58 65535_2-1-3-1-1-8-4_1434_6 2026-07-04 03:55:15 WIB
...
show more
1783112115.836147 142.112.146.192 103.166.156.58 65535_2-1-3-1-1-8-4_1434_6 2026-07-04 03:55:15 WIB
...
show less
|
Email Spam
Hacking
|
|
๐บ๐ธ
54.90.98.111
|
|
07/04/2026-03:55:13.411937 [Drop] [**] [1:384:8] Suricata PROTOCOL-ICMP PING [**] [Classification: ...
show more
07/04/2026-03:55:13.411937 [Drop] [**] [1:384:8] Suricata PROTOCOL-ICMP PING [**] [Classification: Misc activity] [Priority: 3] {ICMP} 54.90.98.111:8 -> 103.166.156.58:0
...
show less
|
Email Spam
Hacking
|
|
๐บ๐ธ
100.29.192.84
|
|
07/04/2026-03:55:04.075104 [Drop] [**] [1:921050:1] Suricata dibuat Gemini Suspicious SYN Scan (Fin ...
show more
07/04/2026-03:55:04.075104 [Drop] [**] [1:921050:1] Suricata dibuat Gemini Suspicious SYN Scan (Fingerprint: Win 65535, WS 256, MSS 1460) [**] [Classification: Attempted Information Leak] [Priority: 3] {TCP} 100.29.192.84:47240 -> 103.166.156.58:8085
...
show less
|
Email Spam
Hacking
|
|
๐จ๐ด
45.238.183.227
|
|
[Sat Jul 04 03:54:16.166716 2026] [security2:error] [pid 617011:tid 140643723626176] [client 45.238. ...
show more
[Sat Jul 04 03:54:16.166716 2026] [security2:error] [pid 617011:tid 140643723626176] [client 45.238.183.227:8601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "akgheD7vbXfMqwWxZ7FbGAAAFgM"], referer https://www.yandex.
...
show less
|
Email Spam
Hacking
|
|
๐ฒ๐พ
121.122.246.3
|
|
1783112003.872257 121.122.246.3 103.166.156.58 53816_2_536_0 2026-07-04 03:53:23 WIB
...
|
Email Spam
Hacking
|
|
๐ง๐ท
45.175.15.251
|
|
[Sat Jul 04 03:51:45.909787 2026] [security2:error] [pid 617011:tid 140643740411584] [client 45.175. ...
show more
[Sat Jul 04 03:51:45.909787 2026] [security2:error] [pid 617011:tid 140643740411584] [client 45.175.15.251:6499] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026"] [unique_id "akgg4T7vbXfMqwWxZ7FbFAAACwE"], referer http://www.baidu.go.id
...
show less
|
Email Spam
Hacking
|
|
๐ธ๐ช
189.81.165.233
|
|
[Sat Jul 04 03:51:44.918307 2026] [security2:error] [pid 617019:tid 140643673269952] [client 189.81. ...
show more
[Sat Jul 04 03:51:44.918307 2026] [security2:error] [pid 617019:tid 140643673269952] [client 189.81.165.233:28664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "akgg4KdGtusoLoU34teQVgAAUwk"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[617047] [XDqrFzt4Xk0] [akgg4KdGtusoLoU34teQVgAAUwk] keep_alive=[1] [2026-07-04 03:51:44.918314] [R:akgg4KdGtusoLoU34teQVgAAUwk] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Mobile Safari/537.36 EdgA/127.0.0.0' Host:'staklim-jatim.bmkg.
...
show less
|
Email Spam
Hacking
|
|
๐ฎ๐น
101.59.103.23
|
|
[Sat Jul 04 03:51:43.188026 2026] [security2:error] [pid 617019:tid 140643690055360] [client 101.59. ...
show more
[Sat Jul 04 03:51:43.188026 2026] [security2:error] [pid 617019:tid 140643690055360] [client 101.59.103.23:58084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "akgg36dGtusoLoU34teQVQAAUAc"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[617045] [QAiPFzt7Xk0] [akgg36dGtusoLoU34teQVQAAUAc] keep_alive=[1] [2026-07-04 03:51:43.188034] [R:akgg36dGtusoLoU34teQVQAAUAc] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/26.0 Chrome/122.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim
...
show less
|
Email Spam
Hacking
|
|
๐ง๐ท
45.231.211.250
|
|
[Sat Jul 04 03:50:27.294028 2026] [security2:error] [pid 617019:tid 140643740411584] [client 45.231. ...
show more
[Sat Jul 04 03:50:27.294028 2026] [security2:error] [pid 617019:tid 140643740411584] [client 45.231.211.250:44702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan"] [unique_id "akggk6dGtusoLoU34teQNgAASAE"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[617039] [62D/Ejt9Xk0] [akggk6dGtusoLoU34teQNgAASAE] keep_alive=[1] [2026-07-04 03:50:27.294038] [R:akggk6dG
...
show less
|
Email Spam
Hacking
|
|
๐ง๐ท
192.140.15.121
|
|
[Sat Jul 04 03:49:57.157908 2026] [security2:error] [pid 617019:tid 140643547379392] [client 192.140 ...
show more
[Sat Jul 04 03:49:57.157908 2026] [security2:error] [pid 617019:tid 140643547379392] [client 192.140.15.121:34123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin"] [unique_id "akggdadGtusoLoU34teQNAAAQRg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[617075] [JDctEXt/Xk0] [akggdadGtusoLoU34teQNAAAQRg] keep_alive=[1] [2026-07-04 03:49:57.157920] [R:akggdadGtusoLoU34teQNAAAQRg] U
...
show less
|
Email Spam
Hacking
|
|
๐ง๐ท
189.127.189.203
|
|
[Sat Jul 04 03:47:51.266538 2026] [security2:error] [pid 593912:tid 140643715233472] [client 189.127 ...
show more
[Sat Jul 04 03:47:51.266538 2026] [security2:error] [pid 593912:tid 140643715233472] [client 189.127.189.203:7544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 15; SM-A165F Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "akgf97SIGBFk5NvAFGW59wABVgQ"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.g
...
show less
|
Email Spam
Hacking
|
|
๐บ๐ธ
152.163.161.23
|
|
[Sat Jul 04 03:47:45.543610 2026] [security2:error] [pid 593912:tid 140643656484544] [client 152.163 ...
show more
[Sat Jul 04 03:47:45.543610 2026] [security2:error] [pid 593912:tid 140643656484544] [client 152.163.161.23:39372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "akgf8bSIGBFk5NvAFGW59gABUws"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593971] [MJVZCbs7mEo] [akgf8bSIGBFk5NvAFGW59gABUws] keep_alive=[1] [2026-07-04 03:47:45.543625] [R:akgf8bSIGBFk5NvAFG
...
show less
|
Email Spam
Hacking
|
|
๐ป๐ณ
14.225.57.40
|
|
07/04/2026-03:46:57.747378 [Drop] [**] [1:384:8] Suricata PROTOCOL-ICMP PING [**] [Classification: ...
show more
07/04/2026-03:46:57.747378 [Drop] [**] [1:384:8] Suricata PROTOCOL-ICMP PING [**] [Classification: Misc activity] [Priority: 3] {ICMP} 14.225.57.40:8 -> 103.166.156.58:0
...
show less
|
Email Spam
Hacking
|
|
๐ฟ๐ฆ
102.217.201.9
|
|
[Sat Jul 04 03:46:13.664030 2026] [security2:error] [pid 593853:tid 140643656484544] [client 102.217 ...
show more
[Sat Jul 04 03:46:13.664030 2026] [security2:error] [pid 593853:tid 140643656484544] [client 102.217.201.9:49540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "akgflRasmVLoUrDJ0a3rewAAxws"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593874] [6RvoA/t7mEo] [akgflRasmVLoUrDJ0a3rewAAxws] keep_alive=[1] [2026-07-04 03:46:13.664038] [R:akgflRasmVLoUrDJ0a3rewAAxws] UA:'Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581' Host:'staklim-jatim.bmkg
...
show less
|
Email Spam
Hacking
|
|
๐จ๐ฟ
87.236.199.230
|
|
[Sat Jul 04 03:45:45.543989 2026] [security2:error] [pid 593912:tid 140643690055360] [client 87.236. ...
show more
[Sat Jul 04 03:45:45.543989 2026] [security2:error] [pid 593912:tid 140643690055360] [client 87.236.199.230:35284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur"] [unique_id "akgfebSIGBFk5NvAFGW58QABQwc"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593967] [Qb89Avs/mEo] [akgfebSIGBFk5NvAFGW58QABQwc] keep_alive=[1] [2026-07-04 03:45:45.543997] [R:akgfebSIGBFk5NvAFGW58QABQwc] U
...
show less
|
Email Spam
Hacking
|
|
๐ฆ๐ท
45.224.189.222
|
|
[Sat Jul 04 03:45:35.742686 2026] [security2:error] [pid 593912:tid 140643664877248] [client 45.224. ...
show more
[Sat Jul 04 03:45:35.742686 2026] [security2:error] [pid 593912:tid 140643664877248] [client 45.224.189.222:15232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur"] [unique_id "akgfb7SIGBFk5NvAFGW58AABWAo"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593970] [K9aWATs6mEo] [akgfb7SIGBFk5NvAFGW58AABWAo] keep_alive=[1] [2026-07-04 03:45:35.742693] [R:akgfb7SIGBFk5NvAFGW58A
...
show less
|
Email Spam
Hacking
|