๐ธ๐ฌ
drewf.ink
2026-07-25 12:52:49
(20 hours ago)
[12:52] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1. ...
show more
[12:52] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12
show less
Hacking
Exploited Host
๐ธ๐ฌ
drewf.ink
2026-07-24 07:39:49
(2 days ago)
[07:39] Port scanning. Port(s) scanned: TCP/1433
Port Scan
๐ธ๐ฌ
drewf.ink
2026-07-24 06:36:05
(2 days ago)
[06:36] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1. ...
show more
[06:36] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12
show less
Hacking
Exploited Host
๐ซ๐ท
sthoyer.de
2026-07-23 05:21:42
(3 days ago)
Jul 23 07:21:41 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Jul 23 07:21:41 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.140.182.0 DST=173.212.223.67 LEN=48 TOS=0x00 PREC=0x20 TTL=114 ID=8223 DF PROTO=TCP SPT=50867 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
๐ซ๐ท
sthoyer.de
2026-07-23 04:21:24
(3 days ago)
Jul 23 06:21:23 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Jul 23 06:21:23 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.140.182.0 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x20 TTL=114 ID=25396 DF PROTO=TCP SPT=63730 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
๐บ๐ธ
kosada.com
2026-07-15 09:01:20
(1 week ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐ซ๐ท
matthieul.dev
2026-07-13 15:35:34
(1 week ago)
Blocked by os-abuseipdb; 7 hits, proto=tcp,udp, ports=22456
Port Scan
Brute-Force
๐บ๐ธ
kosada.com
2026-07-05 02:57:54
(3 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐ฎ๐ฉ
sockominfo
2026-07-02 17:00:53
(3 weeks ago)
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). Conf ...
show more
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1210 (Exploitation of Remote Services). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-07-02 16:00:09
(3 weeks ago)
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported ...
show more
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ฐ๐ท
zlhIcd
2026-06-25 00:38:20
(1 month ago)
158.140.182.0 - - [16/Jun/2026:09:32:23 +0900] "GET /pcwiki/index.php?days=30&from=20251113061724&hi ...
show more
158.140.182.0 - - [16/Jun/2026:09:32:23 +0900] "GET /pcwiki/index.php?days=30&from=20251113061724&hideanons=1&hideminor=1&hidemyself=1&target=%ED%98%B8%ED%9D%A1&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_2_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36"
...
show less
Web Spam
SQL Injection
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2026-06-18 10:59:51
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐ฎ๐ฉ
sockominfo
2026-06-16 22:00:32
(1 month ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2026-06-04 14:32:37
(1 month ago)
[Thu Jun 04 21:32:33.717745 2026] [authz_core:error] [pid 286625:tid 139764789122752] [client 158.14 ...
show more
[Thu Jun 04 21:32:33.717745 2026] [authz_core:error] [pid 286625:tid 139764789122752] [client 158.140.182.0:29353] AH01630: client denied by server configuration: /var/www/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[286638] [QeMvai43yJw] [aiGMgYQDMdgNkFlSUPcdGwABzwE] keep_alive=[1] [2026-06-04 21:32:33.717766] [R:aiGMgYQDMdgNkFlSUPcdGwABzwE] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8
...
show less
Email Spam
Hacking
Anonymous
2026-06-04 09:49:14
(1 month ago)
Suspicious user agent
Web App Attack