🇫🇷
SpaceHost-Server
2026-07-19 22:27:01
(4 days ago)
Brute-Force
Web App Attack
🇮🇩
sockominfo
2026-07-18 21:00:28
(5 days ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Email Spam
🇮🇩
sockominfo
2026-07-18 20:00:08
(5 days ago)
Webshell discovery success (Response: 200). Threat Score: 9.2/10 (CRITICAL). Reported by TangerangKo ...
show more
Webshell discovery success (Response: 200). Threat Score: 9.2/10 (CRITICAL). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Email Spam
🇮🇩
Burayot
2026-07-18 19:21:40
(5 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 153.75.91.161 (US/United States/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 153.75.91.161 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇮🇩
bps-statistics
2026-07-18 19:13:56
(5 days ago)
Remote Shell Reconnaisance: "2026-07-19T02:13:56.388+07:00" "/main/index/sp2010/alfacgiapi/perl.alfa ...
show more
Remote Shell Reconnaisance: "2026-07-19T02:13:56.388+07:00" "/main/index/sp2010/alfacgiapi/perl.alfa" "153.75.91.161" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36"
show less
Web App Attack
Brute-Force
🇮🇩
David Koswari
2026-07-10 06:21:00
(1 week ago)
REQ_BLOCKED_SECURITY
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇮🇩
sockominfo
2026-07-09 17:00:58
(2 weeks ago)
Possible alfa tesla webshell detected in URL., Webshell discovery success (Response: 200). Threat Sc ...
show more
Possible alfa tesla webshell detected in URL., Webshell discovery success (Response: 200). Threat Score: 9.6/10 (CRITICAL). Confidence: 85%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 99%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Email Spam
🇫🇷
Octopuce
2026-07-08 22:18:41
(2 weeks ago)
Aggressive web search of vulnerable pages: /wp-content/uploads/2020/ /wp-content/uploads/2021/ /wp-c ...
show more
Aggressive web search of vulnerable pages: /wp-content/uploads/2020/ /wp-content/uploads/2021/ /wp-content/backup/ /wp-content/backups/ /wp-con ...
show less
Web App Attack
2026-07-08 19:13:58
(2 weeks ago)
suspicious behavior
Blog Spam
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-07-08 16:46:25
(2 weeks ago)
252 requests with url.path *.alfa
Brute-Force
Bad Web Bot
🇮🇩
bps-statistics
2026-07-06 01:55:18
(2 weeks ago)
Remote Shell Reconnaisance: "2026-07-06T08:55:18.378+07:00" "/umkumb/plugins/generic/ots-master/modu ...
show more
Remote Shell Reconnaisance: "2026-07-06T08:55:18.378+07:00" "/umkumb/plugins/generic/ots-master/module/Cermine/config/alfacgiapi/perl.alfa" "153.75.91.161" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36"
show less
Web App Attack
Brute-Force
🇮🇩
bps-statistics
2026-07-05 22:54:43
(2 weeks ago)
Remote Shell Reconnaisance: "2026-07-06T05:54:43.016+07:00" "/umkumb/plugins/generic/ots-master/conf ...
show more
Remote Shell Reconnaisance: "2026-07-06T05:54:43.016+07:00" "/umkumb/plugins/generic/ots-master/config/autoload/alfacgiapi/perl.alfa" "153.75.91.161" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36"
show less
Web App Attack
Brute-Force
🇮🇩
penjaga BRIN
2026-06-15 15:35:45
(1 month ago)
Web application attack
Web App Attack
🇮🇩
hermawan
2026-06-15 11:49:14
(1 month ago)
06/15/2026-18:49:10.700706 [Drop] [**] [1:33212721:1] Suricata 🐾 - 🚨 Curl User Agent 🌐 (TLS1.3 conn ...
show more
06/15/2026-18:49:10.700706 [Drop] [**] [1:33212721:1] Suricata 🐾 - 🚨 Curl User Agent 🌐 (TLS1.3 connection to FQDN) [**] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 153.75.91.161:57720 -> 103.166.156.58:443
...
show less
Email Spam
Hacking
🇩🇪
updown.io
2026-06-14 19:33:35
(1 month ago)
{"level":"info","ts":1781465491.0389335,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1781465491.0389335,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"153.75.91.161","remote_port":"40442","client_ip":"153.75.91.161","proto":"HTTP/1.1","method":"GET","host":"status.bsre.go.id","uri":"/backup.zip","headers":{"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.2.2; en-ca; GT-P5113 Build/JDQ39) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30"],"Accept":["*/*"]}},"bytes_read":0,"user_id":"","duration":0.000105011,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https://status.bsre.go.id/backup.zip"],"Content-Type":[],"Server":["Caddy"]}}
{"level":"info","ts":1781465492.2669148,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"153.75.91.161","remote_port":"40456","client_ip":"153.75.91.161","proto":"HTTP/1.1","method":"GET","host":"status.bsre.go.id","uri":"/backups.zip","headers":{"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.2.2; en-ca; GT-P5113 Build
...
show less
DDoS Attack
Web App Attack