AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User hermawan , the webmaster of staklim-jatim.bmkg.go.id, joined AbuseIPDB in March 2018 and has reported 1,690,048 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇧🇩 182.161.67.47	03 Jul 2026	[Sat Jul 04 03:12:31.758722 2026] [security2:error] [pid 593853:tid 140643664877248] [client 182.161 ... show more [Sat Jul 04 03:12:31.758722 2026] [security2:error] [pid 593853:tid 140643664877248] [client 182.161.67.47:51062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558584-poster-skala-gempa-mmi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558584-poster-skala-gempa-mmi"] [unique_id "akgXrxasmVLoUrDJ0a3rUAAA1wo"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593872] [s2xji/p/mEo] [akgXrxasmVLoUrDJ0a3rUAAA1wo] keep_alive=[1] [2026-07-04 03:12:31.758733] [R:akgXrxasmVLoUrDJ0a3rUAAA1wo] UA:'Mozilla/5.0 (Linux; Android 8. ... show less	Email Spam Hacking
🇵🇰 103.186.77.78	03 Jul 2026	1783109520.700435 103.186.77.78 103.166.156.58 14400_2-4-8-1-3_1440_5 2026-07-04 03:12:00 WIB ...	Email Spam Hacking
🇨🇳 106.75.154.180	03 Jul 2026	07/04/2026-03:12:06.699733 [Drop] [] [1:741481:3] Suricata ET扫描NMAP-sS窗口1024 [] [Classification ... show more 07/04/2026-03:12:06.699733 [Drop] [] [1:741481:3] Suricata ET扫描NMAP-sS窗口1024 [] [Classification: Attempted Information Leak] [Priority: 3] {TCP} 106.75.154.180:58914 -> 103.166.156.58:8765 ... show less	Email Spam Hacking
🇮🇩 140.213.168.76	03 Jul 2026	[Sat Jul 04 03:11:52.712285 2026] [security2:error] [pid 593853:tid 140643673269952] [client 140.213 ... show more [Sat Jul 04 03:11:52.712285 2026] [security2:error] [pid 593853:tid 140643673269952] [client 140.213.168.76:29190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Prakiraan/Peringatan_Dini/2026/03_Maret_2026/11-20/Press_Release_Kewaspadaan_Cuaca_Ekstrem_di_Jawa_Timur_11-20_MARET_2026_e_B_ME_02_04_014_KSUB_III_2026.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "akgXiBasmVLoUrDJ0a3rTwAA1Ak"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593870] [FM8LiTp+mEo] [akgXiBasmVLoUrDJ0a3rTwAA1Ak] keep_alive=[1] [2026-07-04 03 ... show less	Email Spam Hacking
🇳🇬 102.216.181.0	03 Jul 2026	[Sat Jul 04 03:11:48.536067 2026] [security2:error] [pid 593912:tid 140643740411584] [client 102.216 ... show more [Sat Jul 04 03:11:48.536067 2026] [security2:error] [pid 593912:tid 140643740411584] [client 102.216.181.0:15197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Prakiraan/Peringatan_Dini/2026/03_Maret_2026/11-20/Press_Release_Kewaspadaan_Cuaca_Ekstrem_di_Jawa_Timur_11-20_MARET_2026_e_B_ME_02_04_014_KSUB_III_2026.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "akgXhLSIGBFk5NvAFGW5kQABRQE"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593961] [20jSiLo+mEo] [akgXhLSIGBFk5NvAFGW5kQABRQE] keep_alive=[1] [2026-07-04 ... show less	Email Spam Hacking
🇮🇩 180.254.74.190	03 Jul 2026	[Sat Jul 04 03:11:46.756420 2026] [security2:error] [pid 593853:tid 140643681662656] [client 180.254 ... show more [Sat Jul 04 03:11:46.756420 2026] [security2:error] [pid 593853:tid 140643681662656] [client 180.254.74.190:63078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Prakiraan/Peringatan_Dini/2026/03_Maret_2026/11-20/Press_Release_Kewaspadaan_Cuaca_Ekstrem_di_Jawa_Timur_11-20_MARET_2026_e_B_ME_02_04_014_KSUB_III_2026.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "akgXghasmVLoUrDJ0a3rTgAAzgg"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593868] [TFi7iLp9mEo] [akgXghasmVLoUrDJ0a3rTgAAzgg] keep_alive=[1] [2026-07-0 ... show less	Email Spam Hacking
🇨🇳 27.15.57.106	03 Jul 2026	1783109457.953507 27.15.57.106 103.166.156.58 65535_2-4-8-1-3_1440_4 2026-07-04 03:10:57 WIB ...	Email Spam Hacking
🇨🇳 111.25.95.182	03 Jul 2026	1783109449.968005 111.25.95.182 103.166.156.58 29200_2-4-8-1-3_1452_6 2026-07-04 03:10:49 WIB ...	Email Spam Hacking
🇳🇵 103.86.57.117	03 Jul 2026	[Sat Jul 04 03:10:43.780238 2026] [security2:error] [pid 579853:tid 140643614521024] [client 103.86. ... show more [Sat Jul 04 03:10:43.780238 2026] [security2:error] [pid 579853:tid 140643614521024] [client 103.86.57.117:54537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026"] [unique_id "akgXQ5mI7P9tOJq73VzG3QAAhhA"], referer https://www.yande ... show less	Email Spam Hacking
🇬🇧 185.166.40.233	03 Jul 2026	[Sat Jul 04 03:10:00.894756 2026] [security2:error] [pid 579853:tid 140643631306432] [client 185.166 ... show more [Sat Jul 04 03:10:00.894756 2026] [security2:error] [pid 579853:tid 140643631306432] [client 185.166.40.233:23400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya"] [unique_id "akgXGJmI7P9tOJq73VzG2gAAlw4"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[579868] [twlrgjpflU0] [akgXGJmI7P9tOJq73VzG2gAAlw4] keep_alive=[1] ... show less	Email Spam Hacking
🇺🇸 172.58.123.42	03 Jul 2026	1783109369.526565 172.58.123.42 103.166.156.58 65535_2-4-8-1-3_1356_6 2026-07-04 03:09:29 WIB ...	Email Spam Hacking
🇧🇷 187.0.45.161	03 Jul 2026	[Sat Jul 04 03:09:23.129810 2026] [security2:error] [pid 579938:tid 140643597735616] [client 187.0.4 ... show more [Sat Jul 04 03:09:23.129810 2026] [security2:error] [pid 579938:tid 140643597735616] [client 187.0.45.161:42828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026"] [unique_id "akgW803qhuluGXYLf80-kwAAWBI"], referer https://www.bmkg.go.id/ ... show less	Email Spam Hacking
🇸🇪 189.81.164.7	03 Jul 2026	[Sat Jul 04 03:09:22.688788 2026] [security2:error] [pid 579880:tid 140643715233472] [client 189.81. ... show more [Sat Jul 04 03:09:22.688788 2026] [security2:error] [pid 579880:tid 140643715233472] [client 189.81.164.7:51530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim"] [unique_id "akgW8v_sn9bL5Mgnh_yLqwAACwQ"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[579903] [4oMjgDp5lU0] [akgW8v_sn9bL5Mgnh_yLqwAACwQ] keep_alive=[1] [2026-07-04 03:09:22.688804] [R:akgW8v_sn9bL5Mgnh_yLqwAACwQ] UA: ... show less	Email Spam Hacking
🇵🇱 94.240.25.11	03 Jul 2026	[Sat Jul 04 03:09:16.324564 2026] [security2:error] [pid 579853:tid 140643723626176] [client 94.240. ... show more [Sat Jul 04 03:09:16.324564 2026] [security2:error] [pid 579853:tid 140643723626176] [client 94.240.25.11:58665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026"] [unique_id "akgW7JmI7P9tOJq73VzG2AAAjgM"], referer https://www.google ... show less	Email Spam Hacking
🇧🇷 189.51.42.9	03 Jul 2026	[Sat Jul 04 03:09:02.602771 2026] [security2:error] [pid 579880:tid 140643723626176] [client 189.51. ... show more [Sat Jul 04 03:09:02.602771 2026] [security2:error] [pid 579880:tid 140643723626176] [client 189.51.42.9:8912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba"] [unique_id "akgW3v_sn9bL5Mgnh_yLqgAABwM"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[579901] [ARvjfvp+lU0] [akgW3v_sn9bL5Mgnh_yLqgAA ... show less	Email Spam Hacking
🇺🇦 185.177.188.34	03 Jul 2026	[Sat Jul 04 03:08:57.916659 2026] [security2:error] [pid 579880:tid 140643732018880] [client 185.177 ... show more [Sat Jul 04 03:08:57.916659 2026] [security2:error] [pid 579880:tid 140643732018880] [client 185.177.188.34:58623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story"] [unique_id "akgW2f_sn9bL5Mgnh_yLqQAAAQI"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[579900] [VKOefvp/lU0] [akgW2f_sn9bL5Mgnh_yLqQAAAQI] keep_alive=[1] [2026-07-04 03:08:57.916669] [R:akgW2f_sn9bL5Mgnh_yLqQAAAQI] UA:'Mozilla/5.0 (Linux; Android 9; SM ... show less	Email Spam Hacking
🇲🇻 69.94.39.163	03 Jul 2026	[Sat Jul 04 03:08:32.032490 2026] [security2:error] [pid 579853:tid 140643664877248] [client 69.94.3 ... show more [Sat Jul 04 03:08:32.032490 2026] [security2:error] [pid 579853:tid 140643664877248] [client 69.94.39.163:43716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story"] [unique_id "akgWwJmI7P9tOJq73VzG0wAAgAo"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[579864] [INkbfTpflU0] [akgWwJmI7P9tOJq73VzG0wAAgAo] keep_alive=[1] [2026-07-04 03:08:32.032501] [R:akgWwJmI7P9tOJq73VzG0wAAgAo] UA:'Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Bu ... show less	Email Spam Hacking
🇮🇳 112.140.189.214	03 Jul 2026	[Sat Jul 04 03:08:25.678903 2026] [security2:error] [pid 579880:tid 140643740411584] [client 112.140 ... show more [Sat Jul 04 03:08:25.678903 2026] [security2:error] [pid 579880:tid 140643740411584] [client 112.140.189.214:46338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "akgWuf_sn9bL5Mgnh_yLpQAADwE"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[579899] [89qyfLp4lU0] [akgWuf_sn9bL5Mgnh_yLpQAADwE] keep_alive=[1] [2026-07-04 03:08:25.678910] [R:akgWuf_sn9bL5Mgnh_yLpQAADwE] UA:'Mozilla/5.0 (Linux; Android 9; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,app ... show less	Email Spam Hacking
🇺🇸 71.62.58.72	03 Jul 2026	1783109268.653495 71.62.58.72 103.166.156.58 65535_2-1-1-8-1-3_1460_6 2026-07-04 03:07:48 WIB ...	Email Spam Hacking
🇧🇷 45.178.202.172	03 Jul 2026	[Sat Jul 04 03:07:47.262859 2026] [security2:error] [pid 579853:tid 140643681662656] [client 45.178. ... show more [Sat Jul 04 03:07:47.262859 2026] [security2:error] [pid 579853:tid 140643681662656] [client 45.178.202.172:47698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "akgWk5mI7P9tOJq73VzG0QAAkwg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[579862] [fMxnevpelU0] [akgWk5mI7P9tOJq73VzG0QAAkwg] keep_alive=[1] [2026-07-04 03:07:47.262868] [R:akgWk5mI7P9tOJq73VzG0QAAkwg] UA:'Mozilla/5.0 (Linu ... show less	Email Spam Hacking
🇷🇺 79.135.241.250	03 Jul 2026	07/04/2026-03:06:59.517966 [Drop] [] [1:921747:0] Suricata Dibuat Gemini GRE Tunnel Traffic Detec ... show more 07/04/2026-03:06:59.517966 [Drop] [] [1:921747:0] Suricata Dibuat Gemini GRE Tunnel Traffic Detected [**] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {GRE} 79.135.241.250:0 -> 103.166.156.58:0 ... show less	Email Spam Hacking
🇧🇷 177.128.67.190	03 Jul 2026	[Sat Jul 04 03:06:52.520909 2026] [security2:error] [pid 579880:tid 140643547379392] [client 177.128 ... show more [Sat Jul 04 03:06:52.520909 2026] [security2:error] [pid 579880:tid 140643547379392] [client 177.128.67.190:38481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "akgWXP_sn9bL5Mgnh_yLogAABRg"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[579931] [FwYmd3p/lU0] [akgWXP_sn9bL5Mgnh_yLogAABRg] keep_alive=[1] [2026- ... show less	Email Spam Hacking
🇺🇸 54.209.60.63	03 Jul 2026	1783109205.231543 54.209.60.63 103.166.156.58 26883_2-4-8-1-3_1460_7 2026-07-04 03:06:45 WIB ...	Email Spam Hacking
🇺🇸 184.72.115.35	03 Jul 2026	[Sat Jul 04 03:06:46.139925 2026] [security2:error] [pid 579938:tid 140642965501632] [client 184.72. ... show more [Sat Jul 04 03:06:46.139925 2026] [security2:error] [pid 579938:tid 140642965501632] [client 184.72.115.35:3252] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "429"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 184.72.115.35 request_line = GET /index.php/profil/profil-pegawai HTTP/1.1 Request URI RAW = /index.php/profil/profil-pegawai Request Basename = profil-pegawai"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/profil-pegawai"] [unique_id "akgWVk3qhuluGXYLf80-kAAAAEs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[579997] [Aj3LdjozlU0] [akgWVk3qhuluGXYLf80-kAAAAEs] keep_alive=[0] [2026-07-04 03:06:46.139932] [R:akgWVk3qhuluGXYLf80-kAAAAEs] UA:'Mo ... show less	Email Spam Hacking
🇯🇵 160.86.61.191	03 Jul 2026	07/04/2026-03:06:41.631582 [Drop] [] [1:921747:0] Suricata Dibuat Gemini GRE Tunnel Traffic Detec ... show more 07/04/2026-03:06:41.631582 [Drop] [] [1:921747:0] Suricata Dibuat Gemini GRE Tunnel Traffic Detected [**] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {GRE} 160.86.61.191:0 -> 103.166.156.58:0 ... show less	Email Spam Hacking