AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User hermawan , the webmaster of staklim-jatim.bmkg.go.id, joined AbuseIPDB in March 2018 and has reported 1,825,763 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇮🇩 103.155.167.238	5 hours ago	[Wed Nov 04 21:42:05.327499 2026] [security2:error] [pid 12974:tid 140162835150528] [client 103.155. ... show more [Wed Nov 04 21:42:05.327499 2026] [security2:error] [pid 12974:tid 140162835150528] [client 103.155.167.238:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=477&id=982%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-3-9-mei-2016&start=50 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=477&id=982%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-3-9-mei-2016&start=50 Request Ba..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "autEPevEqq- ... show less	Email Spam Hacking
🇺🇸 97.241.129.75	5 hours ago	[Wed Nov 04 21:41:56.197870 2026] [security2:error] [pid 13030:tid 140163330057920] [client 97.241.1 ... show more [Wed Nov 04 21:41:56.197870 2026] [security2:error] [pid 13030:tid 140163330057920] [client 97.241.129.75:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=624&id=2498%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-21-27-maret-2017&start=90 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=624&id=2498%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-21-27-maret-2017&start=90 ..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "autENI8h8H-Sq ... show less	Email Spam Hacking
🇺🇸 20.15.133.163	5 hours ago	[Wed Nov 04 21:39:56.986873 2026] [security2:error] [pid 13030:tid 140162801579712] [client 20.15.13 ... show more [Wed Nov 04 21:39:56.986873 2026] [security2:error] [pid 13030:tid 140162801579712] [client 20.15.133.163:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:from" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "153"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,accept,accept-encoding,user-agent,from,cf-ray,cdn-loop,cf-connecting-ip,cf-ipcountry,cf-visitor found within REQUEST_HEADERS:from: bingbot(at)microsoft.com request_line = GET /index.php/analisis-bulanan/4301-analisis-bulanan-tingkat-ketersediaan-air-bagi-tanaman/analisis-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur/analisis-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur-tahun-20..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4301-anali ... show less	Email Spam Hacking
🇲🇾 9.129.55.133	5 hours ago	[Wed Nov 04 21:36:01.790164 2026] [security2:error] [pid 11078:tid 140163212625600] [client 9.129.55 ... show more [Wed Nov 04 21:36:01.790164 2026] [security2:error] [pid 11078:tid 140163212625600] [client 9.129.55.133:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-curah-hujan-musim-hujan-di-propinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-curah-hujan-musim-hujan-di-propinsi-jawa-timur"] [unique_id "autC0ec4P6ZIQM5Q6G-DQQAAAIs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[11099] [JZhVTFw9IWM] [autC0ec4P6ZIQM5Q6G-DQQAAAIs] kee ... show less	Email Spam Hacking
🇺🇸 2a03:2880:f800:21::	5 hours ago	[Wed Nov 04 21:34:54.679719 2026] [security2:error] [pid 11078:tid 140163355236032] [client 2a03:288 ... show more [Wed Nov 04 21:34:54.679719 2026] [security2:error] [pid 11078:tid 140163355236032] [client 2a03:2880:f800:21:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/analisis-bulanan/4299-analisis-distribusi-hujan/analisis-distribusi-curah-hujan/analisis-distribusi-curah-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-curah-hujan-di-provinsi-jawa-timur-tah..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4299-ana ... show less	Email Spam Hacking
🇺🇸 2a03:2880:f800:41::	5 hours ago	[Wed Nov 04 21:32:32.776731 2026] [security2:error] [pid 2774:tid 140163372021440] [client 2a03:2880 ... show more [Wed Nov 04 21:32:32.776731 2026] [security2:error] [pid 2774:tid 140163372021440] [client 2a03:2880:f800:41:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/prakiraan-musim/2042-prakiraan-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/2042-prakiraan-musim-hujan"] [unique_id "autCAMlXCRYNqebZjLIc7wAAAIE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2777] [1ELgP9yoA2M] [autCAMlXCRYNqe ... show less	Email Spam Hacking
🇬🇧 86.129.140.58	5 hours ago	[Wed Nov 04 21:32:26.015283 2026] [security2:error] [pid 2774:tid 140163254523584] [client 86.129.14 ... show more [Wed Nov 04 21:32:26.015283 2026] [security2:error] [pid 2774:tid 140163254523584] [client 86.129.140.58:0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "((?:(?:[!-\\\\+\\\\-:->@\\\\[\\\\]\\\\^`\\\\{-~]\|\\\\x{c2}\\\\x{b4}\|\\\\x{e2}\\\\x80[\\\\x98\\\\x99])[^!-\\\\+\\\\-:->@\\\\[\\\\]\\\\^`\\\\{-~]*?){8})" at REQUEST_COOKIES:cf_clearance. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "4232"] [id "942420"] [msg "Restricted SQL Character Anomaly Detection (cookies): # of special characters exceeded (8)"] [data "Matched Data: -LwXUfYr1_XnsZLzVrADjXVzARd-D9U8DaSN3YDCVqh-jcoKSrVnuuxZE1hs8jCoaO1-saKWjBdks1YgkMvM-Sfew-CTzuoRlDEy-FXYS1B- found within REQUEST_COOKIES:cf_clearance: CvCPrrs6W4lCFAR9VeaQoykX0qUhkK3YidGw8bfERe41TLEC9A5uw8ff7FM_BNT8LzoRcC45uJdkSm1z498piyuM9TIMiUpylFHkLoagAAyG1fjOHr2Bz2f7XUD9E7-LwXUfYr1_XnsZLzVrADjXVzARd-D9U8DaSN3YDCVqh-jcoKSrVnuuxZE1hs8jCoaO1-saKWjBdks1YgkMvM-Sfew-CTzuoRlDEy-FXYS1B-5R4onP8gw6UhDR ... show less	Email Spam Hacking
🇮🇩 2a03:2880:f329:18f:face:b00c:0:619c	5 hours ago	[Wed Nov 04 21:29:30.479042 2026] [security2:error] [pid 2774:tid 140163330057920] [client 2a03:2880 ... show more [Wed Nov 04 21:29:30.479042 2026] [security2:error] [pid 2774:tid 140163330057920] [client 2a03:2880:f329:18f:face:b00c:0:619c:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan/perbandingan-awal-musim-hujan-dengan-normalnya HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan/perbandingan-awal-musim-hujan-dengan-normalnya"] [unique_id "autBSslX ... show less	Email Spam Hacking
🇮🇩 2a03:2880:f304:1aa:face:b00c:0:619c	5 hours ago	[Wed Nov 04 21:29:30.656228 2026] [security2:error] [pid 2718:tid 140162793187008] [client 2a03:2880 ... show more [Wed Nov 04 21:29:30.656228 2026] [security2:error] [pid 2718:tid 140162793187008] [client 2a03:2880:f304:1aa:face:b00c:0:619c:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/prakiraan-musim/4268-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/prediksi-awal-musim-hujan-tahun-2024-2025-zona-musim-di-provinsi-jawa-timur/555561421-..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan- ... show less	Email Spam Hacking
🇮🇩 2a03:2880:f360:1a8:face:b00c:0:619a	5 hours ago	[Wed Nov 04 21:29:29.862647 2026] [security2:error] [pid 2719:tid 140163330057920] [client 2a03:2880 ... show more [Wed Nov 04 21:29:29.862647 2026] [security2:error] [pid 2719:tid 140163330057920] [client 2a03:2880:f360:1a8:face:b00c:0:619a:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/prakiraan-musim/4201-prakiraan-musim-hujan/prakiraan-curah-hujan-musim-hujan/prakiraan-curah-hujan-musim-hujan-di-propinsi-jawa-timur/prakiraan-6-bulanan-prakiraan-curah-hujan-musim-hujan-tahun-202..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan- ... show less	Email Spam Hacking
🇮🇩 2a03:2880:f360:1aa:face:b00c:0:619c	5 hours ago	[Wed Nov 04 21:29:29.325401 2026] [security2:error] [pid 2719:tid 140163338450624] [client 2a03:2880 ... show more [Wed Nov 04 21:29:29.325401 2026] [security2:error] [pid 2719:tid 140163338450624] [client 2a03:2880:f360:1aa:face:b00c:0:619c:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/prakiraan-bulanan/4234-prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-bulanan-sifat-hujan-di-propinsi-jawa-timur-tahun-2024/555561622-prakiraan-bulanan..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan- ... show less	Email Spam Hacking
🇮🇳 103.240.166.253	5 hours ago	[Wed Nov 04 21:26:03.507942 2026] [security2:error] [pid 165099:tid 140341101438656] [client 103.240 ... show more [Wed Nov 04 21:26:03.507942 2026] [security2:error] [pid 165099:tid 140341101438656] [client 103.240.166.253:0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "((?:(?:[!-\\\\+\\\\-:->@\\\\[\\\\]\\\\^`\\\\{-~]\|\\\\x{c2}\\\\x{b4}\|\\\\x{e2}\\\\x80[\\\\x98\\\\x99])[^!-\\\\+\\\\-:->@\\\\[\\\\]\\\\^`\\\\{-~]*?){8})" at REQUEST_COOKIES:cf_clearance. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "4232"] [id "942420"] [msg "Restricted SQL Character Anomaly Detection (cookies): # of special characters exceeded (8)"] [data "Matched Data: -017UrUN5oSu0dr1lvn4n_MxAtlK63wNsNYV90DTpHteX2_MZkYqnTJpeMRpbz60WyFoEHI213W1qT7Zu2VbkjBabtZMUwfb-d5A6_SXt4bfadoOG0qlF_0twQ2tbrHmILM1mJD69NEy2ev1BjnG58FaNxgEFf0WFsPVLcahQEtjROzO1jp1XzbG-YgPd1zzIi2XZL-piTpagsL0d0Y94EFV4osFC1BHpXOsg9TfIO-y-KRHEKkj89-qhjcDuq0L9we2UYG- found within REQUEST_COOKIES:cf_clearance: CsFNdFmSdJ-017UrUN5oSu0dr1lvn4n_MxAtlK63wNsNYV90DTpHteX2_MZkYqnTJpeMRpbz60WyFoEHI213W1qT ... show less	Email Spam Hacking
🇧🇷 191.6.126.199	5 hours ago	[Wed Nov 04 21:25:41.055912 2026] [security2:error] [pid 164869:tid 140341861340864] [client 191.6.1 ... show more [Wed Nov 04 21:25:41.055912 2026] [security2:error] [pid 164869:tid 140341861340864] [client 191.6.126.199:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Quark" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Quark found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 QuarkPC/4.5.0.509 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "autAZT1uMtBNr2hEueJYGAAAAAA"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[164871] [wfJVJxwrP+4] [autAZT1uMtBNr2hEueJYGAAAAAA] keep_alive=[0] [2026-11-04 21:25:41.055920] [R:autAZT1uMtBNr2hEueJYGAAAAAA] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ... show less	Email Spam Hacking
🇸🇰 188.167.122.166	5 hours ago	[Wed Nov 04 21:23:29.879150 2026] [security2:error] [pid 158401:tid 139814640793280] [client 188.167 ... show more [Wed Nov 04 21:23:29.879150 2026] [security2:error] [pid 158401:tid 139814640793280] [client 188.167.122.166:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "kubuntu" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: kubuntu found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "aus_4YOaiH1bnv_NFb3rbgAAANU"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] ... show less	Email Spam Hacking
🇺🇦 91.196.55.171	5 hours ago	[Wed Nov 04 21:22:59.270240 2026] [security2:error] [pid 158401:tid 139815160878784] [client 91.196. ... show more [Wed Nov 04 21:22:59.270240 2026] [security2:error] [pid 158401:tid 139815160878784] [client 91.196.55.171:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "kubuntu" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: kubuntu found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "aus_w4OaiH1bnv_NFb3rawAAANA"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [st ... show less	Email Spam Hacking
🇷🇺 94.180.239.8	5 hours ago	[Wed Nov 04 21:22:19.538153 2026] [security2:error] [pid 158373:tid 139814766618304] [client 94.180. ... show more [Wed Nov 04 21:22:19.538153 2026] [security2:error] [pid 158373:tid 139814766618304] [client 94.180.239.8:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:referer: https://www.bing.go.id/ request_line = GET /images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Distibusi_Sifat_Hujan_Bulanan/Analisis_Distibusi_Sifat_Hujan_Bulanan_Provinsi_Jawa_Timur/2019/12/Analisis_Bulanan_Distribusi_Sifat_Hujan_Bulan_Desember_Tahun_2020_di_Provinsi_Jawa_Timur.webp HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Distibusi_Sifat_Hujan_Bulanan/Analisis_Distibusi_Sifat_Hujan_Bulanan_Provinsi_Jawa_Timur/2019/12/Analisis_Bulanan_Distribusi_Sifat_Hujan_Bulan_D ... show less	Email Spam Hacking
🇨🇴 190.29.171.172	5 hours ago	[Wed Nov 04 21:21:47.840288 2026] [security2:error] [pid 158401:tid 139814657578688] [client 190.29. ... show more [Wed Nov 04 21:21:47.840288 2026] [security2:error] [pid 158401:tid 139814657578688] [client 190.29.171.172:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "kubuntu" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: kubuntu found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Daerah_Potensi_Banjir_Bulanan/Prakiraan_Daerah_Potensi_Banjir_Bulan_Provinsi_Jawa_Timur/2019/06/10-6-2019/03-Prakiraan_Bulanan_Daerah_Potensi_Banjir_di_Provinsi_Jawa_Timur_Bulan-SEPTEMBER-Tahun-2019_update_10_Juni_2019.jpg HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Daerah_Potens ... show less	Email Spam Hacking
🇺🇸 40.77.167.14	5 hours ago	[Wed Nov 04 21:19:31.974392 2026] [security2:error] [pid 158401:tid 139814137493184] [client 40.77.1 ... show more [Wed Nov 04 21:19:31.974392 2026] [security2:error] [pid 158401:tid 139814137493184] [client 40.77.167.14:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:from" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "153"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,user-agent,accept-encoding,accept,from,cf-ray,cdn-loop,cf-connecting-ip,cf-ipcountry,cf-visitor found within REQUEST_HEADERS:from: bingbot(at)microsoft.com request_line = GET /index.php/profil/meteorologi/list-of-all-tags/w_1982.jpg HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/w_1982.jpg"] [unique_id "aus-84OaiH1bnv_NFb3rVgAAANg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[158427] [XjVWERyZMnE] [aus-84OaiH1bnv_NFb3rVgAAANg] keep_alive=[0] ... show less	Email Spam Hacking
🇮🇳 117.208.187.234	5 hours ago	[Wed Nov 04 21:19:16.552925 2026] [security2:error] [pid 158401:tid 139814665971392] [client 117.208 ... show more [Wed Nov 04 21:19:16.552925 2026] [security2:error] [pid 158401:tid 139814665971392] [client 117.208.187.234:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "knoppix" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: knoppix found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Tingkat_Ketersediaan_Air_Bagi_Tanaman/Provinsi_Jawa_Timur/2020/07/03_Prakiraan-Bulanan_Tingkat_Ketersediaan_Air_Bagi_Tanaman_di_Jawa_Timur_Untuk_Bulan_NOVEMBER_2020_Update_dari_Analisis_Bulan_Juli_2020.jpg HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Tingkat_Ketersediaan_Air_Bagi ... show less	Email Spam Hacking
🇺🇸 50.225.109.5	5 hours ago	[Wed Nov 04 21:19:12.142104 2026] [security2:error] [pid 158401:tid 139815186056896] [client 50.225. ... show more [Wed Nov 04 21:19:12.142104 2026] [security2:error] [pid 158401:tid 139815186056896] [client 50.225.109.5:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:referer: http://www.baidu.go.id/ request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aus-4IOaiH1bnv_NFb3rUQAAAM0"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[158416] [eZQnENyaMnE] [aus-4IOaiH1bnv_NFb3rUQAAAM0] keep_alive=[0] [2026-11-04 21:19:12.142110] [R:aus-4IOaiH1bnv_NFb3rUQAAAM0] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Avast/134.0.0.0' Host:'staklim-jatim.bmkg.go.id ... show less	Email Spam Hacking
🇪🇸 188.76.153.7	5 hours ago	[Wed Nov 04 21:19:11.101684 2026] [security2:error] [pid 158401:tid 139815211235008] [client 188.76. ... show more [Wed Nov 04 21:19:11.101684 2026] [security2:error] [pid 158401:tid 139815211235008] [client 188.76.153.7:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:referer: http://www.baidu.go.id/ request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Tingkat_Ketersediaan_Air_Bagi_Tanaman/Provinsi_Jawa_Timur/2020/07/03_Prakiraan-Bulanan_Tingkat_Ketersediaan_Air_Bagi_Tanaman_di_Jawa_Timur_Untuk_Bulan_NOVEMBER_2020_Update_dari_Analisis_Bulan_Juli_2020.jpg HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Tingkat_Ketersediaan_Air_Bagi_Tanaman/Provinsi_Jawa_Timur/2020/07/03_Prakiraan-Bulanan_Tingkat_Ketersediaan_Air_Bagi_Tana ... show less	Email Spam Hacking
🇺🇸 2a03:2880:f800:30::	5 hours ago	[Wed Nov 04 21:18:34.354413 2026] [security2:error] [pid 158345:tid 139814624007872] [client 2a03:28 ... show more [Wed Nov 04 21:18:34.354413 2026] [security2:error] [pid 158345:tid 139814624007872] [client 2a03:2880:f800:30:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555563354-prediksi-bulanan-sifat-hujan-bulan-september-tahun-2026-update-dari-analisis-bulan-juli-tahun-2026-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulan ... show less	Email Spam Hacking
🇺🇸 2a03:2880:f800:36::	5 hours ago	[Wed Nov 04 21:18:20.945547 2026] [security2:error] [pid 158373:tid 139815968614080] [client 2a03:28 ... show more [Wed Nov 04 21:18:20.945547 2026] [security2:error] [pid 158373:tid 139815968614080] [client 2a03:2880:f800:36:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-hari-tanpa-hujan-berturut-turut-maksimum/555563350-analisis-bulanan-hari-tanpa-hujan-berturut-turut-maksimum-di-provinsi-jawa-timur-bulan-mei-juni-juli-tahun-2026..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis- ... show less	Email Spam Hacking
🇮🇩 70.153.189.201	5 hours ago	[Wed Nov 04 21:17:33.448570 2026] [security2:error] [pid 158401:tid 139815169271488] [client 70.153. ... show more [Wed Nov 04 21:17:33.448570 2026] [security2:error] [pid 158401:tid 139815169271488] [client 70.153.189.201:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/geofisika/images/banners/Memahami_Potensi_Gempa_Jawa_Timur.jpg HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/geofisika/images/banners/Memahami_Potensi_Gempa_Jawa_Timur.jpg"] [unique_id "aus-fYOaiH1bnv_NFb3rQwAAAM8"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[158418] [KKVFClybMnE] [aus-fYOaiH1bnv_NFb3rQwAAAM8] keep_alive=[0] [2026-11-04 21:17:33.448596] [R:aus-fYOaiH1b ... show less	Email Spam Hacking
🇵🇭 143.44.144.40	5 hours ago	[Wed Nov 04 21:16:56.222826 2026] [security2:error] [pid 158401:tid 139815186056896] [client 143.44. ... show more [Wed Nov 04 21:16:56.222826 2026] [security2:error] [pid 158401:tid 139815186056896] [client 143.44.144.40:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan"] [unique_id "aus-WIOaiH1bnv_NFb3rMgAAAM0"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[158416] [R50NCNyaMnE] [aus-WIOaiH1bnv_NFb3rMgAAAM0] keep_alive=[0] [2026-11-04 21:16:56.222832] [R:aus-WIOaiH1bnv_NFb3rMgAAAM0] UA:'Mozilla/5.0 (Macintosh; In ... show less	Email Spam Hacking