🇮🇹
mgarofano80
2026-08-26 04:09:27
(1 day ago)
Brute-Force
Web App Attack
🇮🇩
sockominfo
2026-07-30 07:00:54
(3 weeks ago)
User login to application from malicious IP 193.202.83.88.. Threat Score: 3.6/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 193.202.83.88.. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-30 06:00:52
(3 weeks ago)
User login to application from malicious IP 193.202.83.88.. Threat Score: 3.7/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 193.202.83.88.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-30 05:00:53
(4 weeks ago)
User login to application from malicious IP 193.202.83.88.. Threat Score: 3.8/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 193.202.83.88.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-30 04:00:08
(4 weeks ago)
User login to application from malicious IP 193.202.83.88.. Threat Score: 0/10 (INFORMATIONAL). Repo ...
show more
User login to application from malicious IP 193.202.83.88.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
2026-07-21 11:32:48
(1 month ago)
SQL Servers UNION Query-based SQL Injection.
SQL Injection
🇳🇱
Site.eu
2026-06-17 21:00:34
(2 months ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-05-15 00:45:49
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 193.202.83.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.83.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 20:45:43.163201 2026] [security2:error] [pid 1736:tid 1748] [client 193.202.83.88:54539] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.psds.link.omegaoak.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.psds.link.omegaoak.com"] [uri "/"] [unique_id "agZstwmQt4RBb1f5ReSAeAAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-23 14:21:49
(4 months ago)
Session Crossing
Hacking
🇫🇷
ELYAZ
2026-03-31 13:57:12
(4 months ago)
(wordpress) Failed wordpress login from 193.202.83.88 (IL/Israel/-): (CF_ENABLE)
Brute-Force
🇩🇪
HandyTreff.de
2026-03-26 18:22:36
(5 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -43.757 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -43.757 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.3
show less
Web App Attack
Bad Web Bot
🇨🇭
backslash
2026-03-20 02:18:00
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-08-20 02:25:01
(1 year ago)
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-29 10:35:40
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 193.202.83.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 193.202.83.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 29 06:35:33.312055 2025] [security2:error] [pid 1092591:tid 1092591] [client 193.202.83.88:28633] [client 193.202.83.88] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||braintechsoftwaresolutions.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/w3-total-cache/lib/w3/pager.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "braintechsoftwaresolutions.com"] [uri "/wp-content/plugins/w3-total-cache/lib/W3/Pager.class.php"] [unique_id "Z-fM9YJ8RHWd-vpiK7yxRgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-26 18:06:05
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 193.202.83.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 193.202.83.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 26 14:05:57.340296 2025] [security2:error] [pid 795405:tid 795405] [client 193.202.83.88:36411] [client 193.202.83.88] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||biorregulador.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biorregulador.com"] [uri "/wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [unique_id "Z-RCBbLd5OEgjoFdZOk3NgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack