[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Persistent Unauthorized Access Attempts (Rule ID: 3303)
- Activity Volume: 62 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261110
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Web Application Attack / Exploit (Rule ID: 31101, 31151)
- Activity Volume: 73 failed attempts detected within 24h
- Target Service: Port 80/443 (Web Server)
- Investigation Reference: Wazuh SIEM Incident Audit #20261110
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Web Application Attack / Exploit (Rule ID: 31101, 30411, 31151, 31104, 30315)
- Activity Volume: 84 failed attempts detected within 24h
- Target Service: Port 80/443 (Web Server)
- Investigation Reference: Wazuh SIEM Incident Audit #20261110
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Persistent Unauthorized Access Attempts (Rule ID: 3332, 3357, 3301, 3302)
- Activity Volume: 125 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261110
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Web Application Attack / Exploit (Rule ID: 30411, 31101, 31151, 31516, 841101)
- Activity Volume: 302 failed attempts detected within 24h
- Target Service: Port 80/443 (Web Server)
- Investigation Reference: Wazuh SIEM Incident Audit #20261110
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Persistent Unauthorized Access Attempts (Rule ID: 3332, 3357)
- Activity Volume: 316 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261110
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Unauthorized Probe & Malicious Traffic (Rule ID: Generic Wazuh Rule)
- Activity Volume: Repeated unauthorized access attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261110
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Web Application Attack / Exploit (Rule ID: 31101, 31151)
- Activity Volume: 89 failed attempts detected within 24h
- Target Service: Port 80/443 (Web Server)
- Investigation Reference: Wazuh SIEM Incident Audit #20261109
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Persistent Unauthorized Access Attempts (Rule ID: 3332, 3357)
- Activity Volume: 316 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261109
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Persistent Unauthorized Access Attempts (Rule ID: 3303, 3353)
- Activity Volume: 118 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261109
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Persistent Unauthorized Access Attempts (Rule ID: 3303)
- Activity Volume: 126 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261109
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Web Application Attack / Exploit (Rule ID: 31101, 30411, 30306, 31151, 31516)
- Activity Volume: 147 failed attempts detected within 24h
- Target Service: Port 80/443 (Web Server)
- Investigation Reference: Wazuh SIEM Incident Audit #20261109
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Web Application Attack / Exploit (Rule ID: 30411, 31101, 31516, 31151, 841101)
- Activity Volume: 152 failed attempts detected within 24h
- Target Service: Port 80/443 (Web Server)
- Investigation Reference: Wazuh SIEM Incident Audit #20261109
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Persistent Unauthorized Access Attempts (Rule ID: 3332, 3357)
- Activity Volume: 10000 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261109
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Unauthorized Probe & Malicious Traffic (Rule ID: 3332)
- Activity Volume: 1 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261106
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Persistent Unauthorized Access Attempts (Rule ID: 3332, 3357)
- Activity Volume: 360 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261106
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Web Application Attack / Exploit (Rule ID: 30411, 31101, 841101, 31151, 31516)
- Activity Volume: 113 failed attempts detected within 24h
- Target Service: Port 80/443 (Web Server)
- Investigation Reference: Wazuh SIEM Incident Audit #20261106
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Unauthorized Probe & Malicious Traffic (Rule ID: 3332)
- Activity Volume: 4 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261106
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Persistent Unauthorized Access Attempts (Rule ID: 3303)
- Activity Volume: 55 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261105
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Web Application Attack / Exploit (Rule ID: 30411, 31101, 31516, 31151)
- Activity Volume: 186 failed attempts detected within 24h
- Target Service: Port 80/443 (Web Server)
- Investigation Reference: Wazuh SIEM Incident Audit #20261105
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Web Application Attack / Exploit (Rule ID: 31101, 31151, 31516)
- Activity Volume: 309 failed attempts detected within 24h
- Target Service: Port 80/443 (Web Server)
- Investigation Reference: Wazuh SIEM Incident Audit #20261105
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Unauthorized Probe & Malicious Traffic (Rule ID: 3332)
- Activity Volume: 6 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261104
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious acti ...
show more[CirebonKota-CSIRT SOC Alert]
Attacker IP detected conducting persistent unauthorized malicious activity against Government of Cirebon City municipal infrastructure.
- Attack Type: Unauthorized Probe & Malicious Traffic (Rule ID: 3332)
- Activity Volume: 8 failed attempts detected within 24h
- Target Service: Municipal Server Infrastructure
- Investigation Reference: Wazuh SIEM Incident Audit #20261104
- Policy: Reported by CirebonKota-CSIRT under responsible disclosure.
show less
Detected high-volume automated email spam and sender spoofing targeting our municipal Postfix mail s ...
show moreDetected high-volume automated email spam and sender spoofing targeting our municipal Postfix mail server.
Logged by Wazuh SIEM (Total: 2,145 alerts):
- 2,139x Rule 3303 (Level 5): Postfix - Sender domain not found
- 4x Rule 3302 (Level 6): Postfix - Rejected by access list
- 2x Rule 3353 (Level 10): Postfix - Multiple invalid sender attempts
The host is generating abusive bulk email traffic with invalid/forged sender domains.
show less
SpoofingEmail Spam
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.