🇩🇪
filstal.org
2026-07-22 17:54:36
(1 hour ago)
Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ...
show more
Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-06-23 15:48:30
(4 weeks ago)
[Tue Jun 23 22:48:26.488998 2026] [security2:error] [pid 683041:tid 140190401132224] [client 103.175 ...
show more
[Tue Jun 23 22:48:26.488998 2026] [security2:error] [pid 683041:tid 140190401132224] [client 103.175.48.236:58322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558584-poster-skala-gempa-mmi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558584-poster-skala-gempa-mmi"] [unique_id "ajqqymHiNBIEiZBNI5-q7AADygc"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[683050] [YmSLsG2Gvck] [ajqqymHiNBIEiZBNI5-q7AADygc] keep_alive=[1] [2026-06-23 22:48:26.489002] [R:ajqqymHiNBIEiZBNI5-q7AADygc] UA:'Mozilla/5.0 (iPhone; CPU iP
...
show less
Email Spam
Hacking
🇮🇩
sockominfo
2026-06-19 21:00:53
(1 month ago)
User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. C ...
show more
User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇩🇪
Vegascosmetics
2026-06-16 11:33:11
(1 month ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇩🇪
Inamin
2026-06-15 02:15:12
(1 month ago)
103.175.48.236 - - [15/Jun/2026:09:49:45 +0800] "GET /index.php?diff=cur&oldid=12496&title=%E3%83%9E ...
show more
103.175.48.236 - - [15/Jun/2026:09:49:45 +0800] "GET /index.php?diff=cur&oldid=12496&title=%E3%83%9E%E3%82%B8%E3%82%AB%E3%83%AB%E3%83%BB%E3%82%BF%E3%82%A4%E3%83%A0%EF%BC%81 HTTP/2.0" 499 0 "-" "Mozilla/5.0 (compatible; MSIE 5.0; Windows NT 5.1; Trident/4.0)"
103.175.48.236 - - [15/Jun/2026:10:15:11 +0800] "GET /index.php?id=1370&page=%E9%9D%92%E7%A9%BAJumping_Heart&title=%E7%89%B9%E6%AE%8A%3A%E5%BC%95%E7%94%A8&wpFormIdentifier=titleform HTTP/2.0" 499 0 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/534.0 (KHTML, like Gecko) Chrome/24.0.849.0 Safari/534.0"
...
show less
Brute-Force
🇲🇳
Public CSIRT/CC of Mongolia
2026-05-06 08:55:11
(2 months ago)
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
Hacking
IoT Targeted
Port Scan
2026-04-28 03:07:00
(2 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇮🇩
sockominfo
2026-04-19 00:00:41
(3 months ago)
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.7/10 (CRITICAL). ...
show more
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.7/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-04-18 23:00:14
(3 months ago)
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.5/10 (HIGH). Repo ...
show more
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.5/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-04-18 22:00:15
(3 months ago)
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Repo ...
show more
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-03-22 21:00:30
(3 months ago)
User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. C ...
show more
User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-03-20 18:00:09
(4 months ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack
🇺🇸
ipblock.com
2026-02-02 20:09:00
(5 months ago)
IPBlock protected site ID [3192-af][s=06].
Exploit request, vulnerability probe.
Hacking
Bad Web Bot
Web App Attack