🇺🇸
Vano Ganzzz
2026-06-08 04:24:42
(4 days ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 138064 (PT. Jinom Network Indone ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 138064 (PT. Jinom Network Indonesia)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-06-08T04:24:42Z
Ray ID: a08520e38ec59998
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
show less
DDoS Attack
Bad Web Bot
🇮🇩
sockominfo
2026-06-04 11:00:47
(1 week ago)
User login to application from malicious IP 103.122.64.213.. Threat Score: 4.2/10 (MEDIUM). Confiden ...
show more
User login to application from malicious IP 103.122.64.213.. Threat Score: 4.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 68%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-06-04 10:00:40
(1 week ago)
User login to application from malicious IP 103.122.64.213.. Threat Score: 4.3/10 (MEDIUM). Confiden ...
show more
User login to application from malicious IP 103.122.64.213.. Threat Score: 4.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 68%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-06-04 09:00:15
(1 week ago)
User login to application from malicious IP 103.122.64.213.. Threat Score: 0/10 (INFORMATIONAL). Rep ...
show more
User login to application from malicious IP 103.122.64.213.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇸🇪
KIDOS
2026-06-02 23:39:37
(1 week ago)
malicious activity
Web App Attack
2026-06-02 09:10:07
(1 week ago)
| [Dangerous/Indonesia] Aggressive IP 103.122.64.213 (~30 hits). Type: DoS Defender- Web server 400 ...
show more
| [Dangerous/Indonesia] Aggressive IP 103.122.64.213 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇷🇴
Fn4ticHz
2026-05-29 02:45:30
(2 weeks ago)
DDoS blocked via ZeroGuard.ID
DDoS Attack
Exploited Host
🇫🇷
MatStef132
2026-05-22 14:04:39
(2 weeks ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇷🇴
Fn4ticHz
2026-05-08 23:02:52
(1 month ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇺🇸
COMPLEX
2026-05-08 15:49:18
(1 month ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: MANAGED_CHALLENGE
ASN: undefined (undefined ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: MANAGED_CHALLENGE
ASN: undefined (undefined)
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Android 12; Mobile; rv:149.0) Gecko/149.0 Firefox/149.0
show less
DDoS Attack
Bad Web Bot
🇮🇹
VHosting
2026-04-26 08:43:12
(1 month ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇮🇹
VHosting
2026-04-10 05:41:45
(2 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇩🇪
NoaQT
2026-04-05 22:08:05
(2 months ago)
103.122.64.213 - - [05/Apr/2026:16:41:57 +0200] "GET /web/login HTTP/1.1" 499 0 "https://app.secure. ...
show more
103.122.64.213 - - [05/Apr/2026:16:41:57 +0200] "GET /web/login HTTP/1.1" 499 0 "https://app.secure.biz/news" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
103.122.64.213 - - [05/Apr/2026:16:43:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.whatsapp.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
103.122.64.213 - - [05/Apr/2026:17:01:34 +0200] "GET /web/login HTTP/1.1" 499 0 "https://shop.secure-media.net/products" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
103.122.64.213 - - [05/Apr/2026:17:03:25 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.whatsapp.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
103.122.64.213 - - [05/Apr/2026:17:37:37 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (Macinto
...
show less
DDoS Attack
🇮🇩
sockominfo
2026-03-22 21:00:30
(2 months ago)
Deep night login (00:00-05:30) - Maximum risk Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL ...
show more
Deep night login (00:00-05:30) - Maximum risk Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-03-22 20:00:09
(2 months ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack