🇷🇴
Fn4ticHz
2026-05-29 02:45:58
(1 week ago)
DDoS blocked via ZeroGuard.ID
DDoS Attack
Exploited Host
🇮🇩
sockominfo
2026-05-28 07:00:39
(1 week ago)
User login to application from malicious IP 103.36.11.245.. Threat Score: 3.4/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 103.36.11.245.. Threat Score: 3.4/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-05-28 06:00:38
(1 week ago)
User login to application from malicious IP 103.36.11.245.. Threat Score: 3.5/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 103.36.11.245.. Threat Score: 3.5/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-05-28 05:00:39
(1 week ago)
User login to application from malicious IP 103.36.11.245.. Threat Score: 3.6/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 103.36.11.245.. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-05-27 13:00:39
(1 week ago)
User login to application from malicious IP 103.36.11.245.. Threat Score: 3.7/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 103.36.11.245.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-05-27 12:00:39
(1 week ago)
User login to application from malicious IP 103.36.11.245.. Threat Score: 3.8/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 103.36.11.245.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-05-27 11:00:17
(1 week ago)
User login to application from malicious IP 103.36.11.245.. Threat Score: 0/10 (INFORMATIONAL). Repo ...
show more
User login to application from malicious IP 103.36.11.245.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇩🇪
SMARTNET
2026-05-27 06:03:53
(1 week ago)
Aisuru(Mirai variant) DDoS | Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d
DDoS Attack
🇮🇩
sockominfo
2026-05-27 03:00:21
(1 week ago)
SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.3/10 (MEDIUM). Reported by TangerangKota ...
show more
SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.3/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
2026-05-17 14:44:08
(2 weeks ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
🇷🇴
Fn4ticHz
2026-05-09 14:23:33
(3 weeks ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇪🇸
el-brujo
2026-05-04 02:39:21
(1 month ago)
Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows N ...
show more
Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: PT Awinet Global Mandiri Country: ID Method: GET Timestamp: 2026-05-04T02:39:21Z ruleId: 9bc0d8e988e545dea9bd4843c4bef55c. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
2026-03-02 16:30:16
(3 months ago)
| [Dangerous/Indonesia] Agressive IP 103.36.11.245 (~30 hits). Type: DoS Defender- Web server 400 er ...
show more
| [Dangerous/Indonesia] Agressive IP 103.36.11.245 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
COMPLEX
2026-01-26 01:07:18
(4 months ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: undefined (undefined)
Protocol: ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: undefined (undefined)
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0
show less
DDoS Attack
Bad Web Bot
🇮🇳
Bharat Datacenter
2026-01-12 02:59:54
(4 months ago)
1: date=2026-01-12 time=08:28:25 eventtime=1768186706382458230 tz="+0530" logid="0720018432" type="u ...
show more
1: date=2026-01-12 time=08:28:25 eventtime=1768186706382458230 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=103.36.11.245 srccountry="Indonesia" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=124730 attack="tcp_syn_flood" srcport=34360 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 3678 > threshold 2000, repeats 124730 times since last log, pps 3714 of prior second" crscore=50 craction=4096 crlevel="critical"
show less
Brute-Force