๐ซ๐ท
dynamix
2026-07-23 12:13:42
(12 hours ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-07-19 23:51:49
(4 days ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
๐ฎ๐ฉ
sockominfo
2026-06-08 17:00:58
(1 month ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack
๐ฉ๐ช
pltcldvlpr
2026-06-07 04:26:51
(1 month ago)
Bogus Useragent: 203.83.40.47 - - [07/Jun/2026:06:26:51 +0200] "GET /protocol?id=st_6_89¶graph=1 ...
show more
Bogus Useragent: 203.83.40.47 - - [07/Jun/2026:06:26:51 +0200] "GET /protocol?id=st_6_89¶graph=14666818&seq=1036 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 7.0; Windows 98; Win 9x 4.90; Trident/5.0)" asn=63859 org="PT. Eka Mas Republik" country=ID
...
show less
Bad Web Bot
๐ฎ๐ฉ
hermawan
2026-06-02 11:29:41
(1 month ago)
[Tue Jun 02 18:29:40.645984 2026] [authz_core:error] [pid 362121:tid 140636977030848] [client 203.83 ...
show more
[Tue Jun 02 18:29:40.645984 2026] [authz_core:error] [pid 362121:tid 140636977030848] [client 203.83.40.47:9414] AH01630: client denied by server configuration: /var/www/index.php, referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[362190] [uwN4oIMuiKs] [ah6-pBDp8DECDVjROzx5AAAAzRE] keep_alive=[1] [2026-06-02 18:29:40.645987] [R:ah6-pBDp8DECDVjROzx5AAAAzRE] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'*/*' Referer:'https://staklim-jatim.bmkg.go.id/ Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
hermawan
2026-05-14 11:07:35
(2 months ago)
[Thu May 14 17:48:28.228123 2026] [authz_core:error] [pid 414907:tid 139837098383040] [client 203.83 ...
show more
[Thu May 14 17:48:28.228123 2026] [authz_core:error] [pid 414907:tid 139837098383040] [client 203.83.40.47:36073] AH01630: client denied by server configuration: /var/www/index.php, referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[415083] [CgQe1oT8zrc] [agWofJ2UR4SRzgOqxps37gAAEho] keep_alive=[1] [2026-05-14 17:48:28.228126] [R:agWofJ2UR4SRzgOqxps37gAAEho] UA:'Mozilla/5.0 (Linux; Android 10; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7' Referer:'https://staklim-jatim.bmkg.go.id/ Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8 Upgrade-Insecure-Requests:'1
...
show less
Email Spam
Hacking
๐ฎ๐ฉ
sockominfo
2026-05-10 23:00:40
(2 months ago)
User login to application during non-business hours. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. ...
show more
User login to application during non-business hours. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-05-10 22:00:40
(2 months ago)
User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. C ...
show more
User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ฌ๐ง
PeravixGroup
2026-05-04 00:17:32
(2 months ago)
Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ...
show more
Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud
show less
Hacking
Exploited Host
๐ฎ๐ฉ
sockominfo
2026-05-03 22:00:48
(2 months ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack
๐ซ๐ท
Sklurk
2026-04-30 01:35:04
(2 months ago)
Web App Attack
Web App Attack
๐ฉ๐ช
Honeypot-EU-Fru
2026-04-27 03:38:52
(2 months ago)
1777261131 - 04/27/2026 05:38:51 Host: 203.83.40.47/203.83.40.47 Port: 445 TCP Blocked
...
Port Scan
๐ฎ๐ฉ
sockominfo
2026-04-15 23:01:18
(3 months ago)
User login to application during non-business hours. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. ...
show more
User login to application during non-business hours. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-04-15 22:00:16
(3 months ago)
User login to application during non-business hours. Threat Score: 6/10 (MEDIUM). Reported by Tanger ...
show more
User login to application during non-business hours. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-04-12 17:00:51
(3 months ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack