🇮🇩
sockominfo
2026-06-06 07:00:39
(51 minutes ago)
User login to application from malicious IP 103.76.148.42.. Threat Score: 3.4/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 103.76.148.42.. Threat Score: 3.4/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-06-06 06:00:40
(1 hour ago)
User login to application from malicious IP 103.76.148.42.. Threat Score: 3.5/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 103.76.148.42.. Threat Score: 3.5/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-06-06 05:00:44
(2 hours ago)
User login to application from malicious IP 103.76.148.42.. Threat Score: 3.6/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 103.76.148.42.. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-06-06 02:00:14
(5 hours ago)
User login to application from malicious IP 103.76.148.42.. Threat Score: 0/10 (INFORMATIONAL). Repo ...
show more
User login to application from malicious IP 103.76.148.42.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇷🇴
Fn4ticHz
2026-05-30 15:41:20
(6 days ago)
DDoS blocked via ZeroGuard.ID
DDoS Attack
Exploited Host
🇨🇦
leithzz
2026-05-25 14:09:21
(1 week ago)
Report by Cloudflare.Time: 2026-05-25T14:08:45Z
DDoS Attack
🇷🇴
Fn4ticHz
2026-05-09 14:02:24
(3 weeks ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇪🇸
el-brujo
2026-05-04 02:39:22
(1 month ago)
Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh ...
show more
Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: PT. Java Digital Nusantara Country: ID Method: GET Timestamp: 2026-05-04T02:39:22Z ruleId: 9bc0d8e988e545dea9bd4843c4bef55c. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
Vano Ganzzz
2026-04-30 11:22:37
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: BLOCK
ASN: 135477 (PT. Java Digital ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: BLOCK
ASN: 135477 (PT. Java Digital Nusantara)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-04-30T11:22:37Z
Ray ID: 9f462b6eed789d23
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0
show less
Bad Web Bot
🇮🇹
VHosting
2026-04-26 08:29:52
(1 month ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇮🇹
VHosting
2026-04-10 05:17:21
(1 month ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
2026-03-23 12:50:03
(2 months ago)
| [Dangerous/Indonesia] Aggressive IP 103.76.148.42 (~30 hits). Type: DoS Defender- Web server 400 e ...
show more
| [Dangerous/Indonesia] Aggressive IP 103.76.148.42 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇧🇪
cmbplf
2026-03-12 13:51:12
(2 months ago)
673 limiting connections by zone (14m59s)
DDoS Attack
🇨🇭
Modules
2025-12-26 02:05:25
(5 months ago)
Open proxy http://103.76.148.42:8181 (RT:74520ms,Loc:Indonesia,ASN:AS135477)
Open Proxy
🇵🇹
PTnet
2025-12-07 06:20:46
(5 months ago)
DDoS Attack (jail:haproxy-https-flood)
DDoS Attack
Exploited Host