🇯🇵
mkaraki
2026-06-05 16:47:40
(2 months ago)
1780678059 # Service_probe # SIGNATURE_SEND # source_ip:125.160.226.240 # dst_port:2087
...
Port Scan
🇲🇳
Public CSIRT/CC of Mongolia
2026-06-05 12:43:04
(2 months ago)
Honeypot hit: Empty payload (likely service probe); 2087 [2] TCP
Port Scan
🇫🇷
Elysium Security
2026-06-05 11:51:07
(2 months ago)
Mass port scanning on a whole network
Port Scan
🇮🇩
Burayot
2026-06-04 23:12:05
(2 months ago)
LF_CPANEL: (cpanel) Failed cPanel login from 125.160.226.240 (ID/Indonesia/-): 1 in the last 3600 se ...
show more
LF_CPANEL: (cpanel) Failed cPanel login from 125.160.226.240 (ID/Indonesia/-): 1 in the last 3600 secs
show less
Brute-Force
🇮🇩
sockominfo
2026-06-04 06:00:40
(2 months ago)
Suspicious user agent detected python-requests/2.32.4. Threat Score: 3.9/10 (LOW). Confidence: 30%. ...
show more
Suspicious user agent detected python-requests/2.32.4. Threat Score: 3.9/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 57%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-06-04 05:00:38
(2 months ago)
Suspicious user agent detected python-requests/2.32.4. Threat Score: 4/10 (MEDIUM). Confidence: 40%. ...
show more
Suspicious user agent detected python-requests/2.32.4. Threat Score: 4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 57%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-06-04 04:00:14
(2 months ago)
Suspicious user agent detected python-requests/2.32.4. Threat Score: 0/10 (INFORMATIONAL). Reported ...
show more
Suspicious user agent detected python-requests/2.32.4. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
TTIS Kota Mataram
2026-06-04 00:19:00
(2 months ago)
XSS attack attempt massive detected by SOC Kota Mataram
Web App Attack
🇮🇩
hermawan
2026-06-03 20:04:46
(2 months ago)
06/04/2026-03:04:42.635033 [Drop] [**] [1:3100006321:0] Suricata match TLS ja3 scan Uniq Zeek no 63 ...
show more
06/04/2026-03:04:42.635033 [Drop] [**] [1:3100006321:0] Suricata match TLS ja3 scan Uniq Zeek no 6321 with hash_1d573f07cf9592c93700cd3f524279e0 [**] [Classification: (null)] [Priority: 3] {TCP} 125.160.226.240:2922 -> 103.166.156.58:443
...
show less
Email Spam
Hacking
🇷🇺
sms.ru
2026-06-03 20:02:04
(2 months ago)
/wp-admin/admin-post.php
Web App Attack
🇮🇩
Burayot
2026-06-01 00:18:02
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 125.160.226.240 (ID/Indonesia/-): 2 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 125.160.226.240 (ID/Indonesia/-): 2 in the last 3600 secs
show less
Web App Attack
🇮🇩
hermawan
2026-05-31 23:59:13
(3 months ago)
[Mon Jun 01 06:59:12.402100 2026] [security2:error] [pid 1493798:tid 140572920633024] [client 125.16 ...
show more
[Mon Jun 01 06:59:12.402100 2026] [security2:error] [pid 1493798:tid 140572920633024] [client 125.160.226.240:25346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "utf-8" at REQUEST_HEADERS:Accept-Charset. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "361"] [id "440015"] [msg "Bot Accept-Charset utf-8"] [data "Matched Data: utf-8 found within REQUEST_HEADERS:Accept-Charset: utf-8 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ahzLUO0PMvoorH6_bS-zGQAAAAg"], referer http://karangploso.jatim.bmkg.go.id:80 [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1493860] [LZFT3eU2iOg] [ahzLUO0PMvoorH6_bS-zGQAAAAg] keep_alive=[0] [2026-06-01 06:59:12.402103] [R:ahzLUO0PMvoorH6_bS-zGQAAAAg] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' Referer:'http
...
show less
Email Spam
Hacking
🇩🇪
SMARTNET
2025-11-26 02:37:10
(9 months ago)
Aisuru(Mirai variant) DDoS
DDoS Attack
2025-02-08 07:29:38
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
MAGIC
2024-04-27 03:01:29
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot