AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User hermawan , the webmaster of staklim-jatim.bmkg.go.id, joined AbuseIPDB in March 2018 and has reported 1,690,048 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇵🇰 103.153.39.102	03 Jul 2026	[Sat Jul 04 03:26:01.031074 2026] [security2:error] [pid 593854:tid 140642839676608] [client 103.153 ... show more [Sat Jul 04 03:26:01.031074 2026] [security2:error] [pid 593854:tid 140642839676608] [client 103.153.39.102:63328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "akga2OEuCpDgW8hc88jkpAAAARE"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593950] [xh+au7p9mEo] [akga2OEuCpDgW8hc88jkpAAAARE] keep_alive=[0] [2026-07-04 03:26:01.031095] [R:akga2OEuCpDgW8hc88jkpAAAARE] U ... show less	Email Spam Hacking
🇮🇳 14.194.241.106	03 Jul 2026	[Sat Jul 04 03:25:45.927005 2026] [security2:error] [pid 593912:tid 140643723626176] [client 14.194. ... show more [Sat Jul 04 03:25:45.927005 2026] [security2:error] [pid 593912:tid 140643723626176] [client 14.194.241.106:59721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "akgaybSIGBFk5NvAFGW51QABTgM"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593963] [5KO5uno5mEo] [akgaybSIGBFk5NvAFGW51QABTgM] keep_alive=[1] [2026-07-04 03:25:45.927019] [R:akgaybSIGBFk5NvAFGW51QABTgM] UA:'Mozilla/5.0 (Linux; Android 13; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go ... show less	Email Spam Hacking
🇸🇪 189.81.165.90	03 Jul 2026	[Sat Jul 04 03:25:07.567287 2026] [security2:error] [pid 593854:tid 140643614521024] [client 189.81. ... show more [Sat Jul 04 03:25:07.567287 2026] [security2:error] [pid 593854:tid 140643614521024] [client 189.81.165.90:21922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "akgao-EuCpDgW8hc88jkogABCxA"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593890] [1X9zuDp/mEo] [akgao-EuCpDgW8hc88jkogABCxA] keep_alive=[1] [2026-07-04 03:25:07.567304] [R:akgao-EuCpDgW8hc88jkogABCxA] UA:'Mozilla/5.0 (Linux; Android 7.0; SM-G930V Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36' Host:'staklim-ja ... show less	Email Spam Hacking
🇨🇳 118.212.120.186	03 Jul 2026	1783110264.024485 118.212.120.186 103.166.156.58 1024_2_1400_0 2026-07-04 03:24:24 WIB ...	Email Spam Hacking
🇦🇺 46.203.226.79	03 Jul 2026	1783110247.728515 46.203.226.79 103.166.156.58 65535_2-4-8-1-3_1436_10 2026-07-04 03:24:07 WIB ...	Email Spam Hacking
🇨🇳 106.75.148.180	03 Jul 2026	[Sat Jul 04 03:23:49.208452 2026] [security2:error] [pid 593854:tid 140643648091840] [client 106.75. ... show more [Sat Jul 04 03:23:49.208452 2026] [security2:error] [pid 593854:tid 140643648091840] [client 106.75.148.180:13058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "utf-8" at REQUEST_HEADERS:Accept-Charset. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "380"] [id "440015"] [msg "Bot Accept-Charset utf-8"] [data "Matched Data: utf-8 found within REQUEST_HEADERS:Accept-Charset: GBK,utf-8;q=0.7,*;q=0.3 request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "akgaVeEuCpDgW8hc88jknAABFgw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593882] [89O0s/p8mEo] [akgaVeEuCpDgW8hc88jknAABFgw] keep_alive=[1] [2026-07-04 03:23:49.208464] [R:akgaVeEuCpDgW8hc88jknAABFgw] UA:'Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9 ... show less	Email Spam Hacking
🇰🇷 45.114.93.15	03 Jul 2026	07/04/2026-03:23:19.698570 [Drop] [] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - W ... show more 07/04/2026-03:23:19.698570 [Drop] [] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - Win 65535 [**] [Classification: (null)] [Priority: 3] {TCP} 45.114.93.15:53511 -> 103.166.156.58:23 ... show less	Email Spam Hacking
🇮🇩 182.9.48.184	03 Jul 2026	[Sat Jul 04 03:20:54.114899 2026] [security2:error] [pid 593854:tid 140642990679744] [client 182.9.4 ... show more [Sat Jul 04 03:20:54.114899 2026] [security2:error] [pid 593854:tid 140642990679744] [client 182.9.48.184:26460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026"] [unique_id "akgZpeEuCpDgW8hc88jklwAAAQk"], referer https://www.yahoo.go. ... show less	Email Spam Hacking
🇺🇸 64.190.113.221	03 Jul 2026	1783110038.385657 64.190.113.221 103.166.156.58 32120_2-4-8-1-3_1360_7 2026-07-04 03:20:38 WIB ...	Email Spam Hacking
🇯🇵 203.178.148.19	03 Jul 2026	07/04/2026-03:20:26.689450 [Drop] [] [1:384:8] Suricata PROTOCOL-ICMP PING [] [Classification: ... show more 07/04/2026-03:20:26.689450 [Drop] [] [1:384:8] Suricata PROTOCOL-ICMP PING [] [Classification: Misc activity] [Priority: 3] {ICMP} 203.178.148.19:8 -> 103.166.156.58:0 ... show less	Email Spam Hacking
🇺🇸 138.99.39.23	03 Jul 2026	1783110004.713068 138.99.39.23 103.166.156.58 64240_2-4-8-1-3_1200_7 2026-07-04 03:20:04 WIB ...	Email Spam Hacking
🇺🇸 138.0.240.64	03 Jul 2026	1783109978.348873 138.0.240.64 103.166.156.58 64240_2-4-8-1-3_1200_7 2026-07-04 03:19:38 WIB ...	Email Spam Hacking
🇺🇸 170.246.52.24	03 Jul 2026	1783109946.083538 170.246.52.24 103.166.156.58 64240_2-4-8-1-3_1200_7 2026-07-04 03:19:06 WIB ...	Email Spam Hacking
🇺🇸 67.61.132.16	03 Jul 2026	1783109889.542398 67.61.132.16 103.166.156.58 65535_2-1-3-1-1-8-4_1436_5 2026-07-04 03:18:09 WIB ...	Email Spam Hacking
🇿🇦 82.25.245.222	03 Jul 2026	1783109854.746746 82.25.245.222 103.166.156.58 65535_2-4-8-1-3_1436_10 2026-07-04 03:17:34 WIB ...	Email Spam Hacking
🇮🇩 140.213.200.140	03 Jul 2026	[Sat Jul 04 03:17:20.768059 2026] [security2:error] [pid 593854:tid 140643706840768] [client 140.213 ... show more [Sat Jul 04 03:17:20.768059 2026] [security2:error] [pid 593854:tid 140643706840768] [client 140.213.200.140:14528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story"] [unique_id "akgY0OEuCpDgW8hc88jkkwABEQU"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593869] [k86fnHp+mEo] [akgY0OEuCpDgW8hc88jkkwABEQU] keep_alive=[1] [2026-07-04 03:17:20.768072] [R:akgY0OEuCpDgW8hc88jkkwABEQU] UA:'Mozilla/5.0 (Android 13; Mobile; ... show less	Email Spam Hacking
🇧🇷 45.160.231.44	03 Jul 2026	07/04/2026-03:17:08.777057 [Drop] [] [1:920621:1] Suricata Local: Ubiquiti Discovery (5678) [] ... show more 07/04/2026-03:17:08.777057 [Drop] [] [1:920621:1] Suricata Local: Ubiquiti Discovery (5678) [] [Classification: (null)] [Priority: 3] {UDP} 45.160.231.44:52799 -> 103.166.156.58:5353 ... show less	Email Spam Hacking
🇬🇧 185.237.62.166	03 Jul 2026	[Sat Jul 04 03:16:04.585165 2026] [security2:error] [pid 593912:tid 140643664877248] [client 185.237 ... show more [Sat Jul 04 03:16:04.585165 2026] [security2:error] [pid 593912:tid 140643664877248] [client 185.237.62.166:57394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "akgYhLSIGBFk5NvAFGW5sgABRgo"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593970] [FfYUmLo+mEo] [akgYhLSIGBFk5NvAFGW5sgABRgo] keep_alive=[1] [2026-07-04 03:16:04.585178] [R:akgYhLSIGBFk5NvAFGW5sgABRgo] U ... show less	Email Spam Hacking
🇬🇧 185.122.130.14	03 Jul 2026	[Sat Jul 04 03:16:01.653686 2026] [security2:error] [pid 593854:tid 140643715233472] [client 185.122 ... show more [Sat Jul 04 03:16:01.653686 2026] [security2:error] [pid 593854:tid 140643715233472] [client 185.122.130.14:62936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [unique_id "akgYgeEuCpDgW8hc88jkkQABCgQ"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593867] [Mk/rl/p/mEo] [akgYgeEuCpDgW8hc88jkkQABCgQ] keep_alive=[1] [2026-07-04 03:16:01.653700] [R:akgYgeEuCpDgW8hc88jkkQABCgQ] UA:'Mozilla/5.0 (Linux; Android 6.0.1; ... show less	Email Spam Hacking
🇨🇱 104.239.88.134	03 Jul 2026	1783109732.927922 104.239.88.134 103.166.156.58 65535_2-4-8-1-3_1436_10 2026-07-04 03:15:32 WIB ...	Email Spam Hacking
🇧🇷 187.87.244.140	03 Jul 2026	Captured JA4H: ge11n_879fb61acf16 \| Log: 187.87.244.140 - - [04/Jul/2026:03:12:51 +0700] "GET /pdfjs ... show more Captured JA4H: ge11n_879fb61acf16 \| Log: 187.87.244.140 - - [04/Jul/2026:03:12:51 +0700] "GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Prakiraan/Peringatan_Dini/2026/03_Maret_2026/11-20/Press_Release_Kewaspadaan_Cuaca_Ekstrem_di_Jawa_Timur_11-20_MARET_2026_e_B_ME_02_04_014_KSUB_III_2026.pdf HTTP/1.1" 200 38825 "-" "Mozilla/5.0 (Linux; Android 12; SM-S908B Build/QP1A.190711.020) AppleWebKit/548.15 (KHTML, like Gecko) Firefox/103.0.748.102 Mobile Safari/548.40" ge11n_host,accept,accept-encoding,connection,accept-language,upgrade-insecure-requests,user-agent... ... show less	Email Spam Hacking
🇻🇳 157.66.218.59	03 Jul 2026	07/04/2026-03:14:04.428377 [Drop] [] [1:839644:1] Suricata NF - SCAN NMAP -sS 1024 Window [] [C ... show more 07/04/2026-03:14:04.428377 [Drop] [] [1:839644:1] Suricata NF - SCAN NMAP -sS 1024 Window [] [Classification: Detection of a Network Scan] [Priority: 3] {TCP} 157.66.218.59:43859 -> 103.166.156.58:3389 ... show less	Email Spam Hacking
🇳🇱 91.92.40.12	03 Jul 2026	07/04/2026-03:14:00.748996 [Drop] [] [1:741481:3] Suricata ET扫描NMAP-sS窗口1024 [] [Classification ... show more 07/04/2026-03:14:00.748996 [Drop] [] [1:741481:3] Suricata ET扫描NMAP-sS窗口1024 [] [Classification: Attempted Information Leak] [Priority: 3] {TCP} 91.92.40.12:49627 -> 103.166.156.58:22 ... show less	Email Spam Hacking
🇺🇸 158.94.187.46	03 Jul 2026	1783109586.515540 158.94.187.46 103.166.156.58 8192_2_1460_0 2026-07-04 03:13:06 WIB ...	Email Spam Hacking
🇺🇸 200.10.44.36	03 Jul 2026	1783109561.851214 200.10.44.36 103.166.156.58 64240_2-4-8-1-3_1200_7 2026-07-04 03:12:41 WIB ...	Email Spam Hacking