🇮🇩
sockominfo
2026-04-25 15:00:44
(1 month ago)
Zimbra: Login failures from malicious IP: 157.66.50.37. Threat Score: 6.2/10 (MEDIUM). Confidence: 4 ...
show more
Zimbra: Login failures from malicious IP: 157.66.50.37. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-04-25 14:00:56
(1 month ago)
Zimbra: Login failures from malicious IP: 157.66.50.37. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ...
show more
Zimbra: Login failures from malicious IP: 157.66.50.37. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-04-25 13:00:16
(1 month ago)
Zimbra: Login failures from malicious IP: 157.66.50.37. Threat Score: 4.8/10 (MEDIUM). Reported by T ...
show more
Zimbra: Login failures from malicious IP: 157.66.50.37. Threat Score: 4.8/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
2026-04-19 15:58:23
(1 month ago)
Shorewall log file match.
Port Scan
2026-04-14 19:50:03
(1 month ago)
| [Normal/Unknown] Aggressive IP 157.66.50.37 (~350 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Normal/Unknown] Aggressive IP 157.66.50.37 (~350 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇮🇹
VHosting
2026-04-10 05:17:19
(1 month ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇮🇹
IRT@Unisi
2026-03-31 19:42:50
(2 months ago)
anomaly:tcp_dst_session,1001>threshold1000,repeats13282timessincelastlog
DDoS Attack
🇮🇹
IRT@Unisi
2026-03-29 11:56:35
(2 months ago)
anomaly:tcp_dst_session,1001>threshold1000,repeats8751timessincelastlog
DDoS Attack
🇮🇹
IRT@Unisi
2026-03-28 05:01:42
(2 months ago)
anomaly:tcp_dst_session,1001>threshold1000,repeats24185timessincelastlog
DDoS Attack
🇺🇸
COMPLEX
2026-03-06 17:05:07
(2 months ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: MANAGED_CHALLENGE
ASN: undefined (undefined ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: MANAGED_CHALLENGE
ASN: undefined (undefined)
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0
show less
DDoS Attack
Bad Web Bot
🇧🇬
cheatmaster.store
2026-02-26 05:17:37
(3 months ago)
Automated report: This IP address has been identified as an active public open proxy.
Classification ...
show more
Automated report: This IP address has been identified as an active public open proxy.
Classification: Open Proxy | Spoofing | VPN/Anonymizer | Bad Web Bot.
Country: Indonesia
Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic.
Reported by automated threat intelligence pipeline. Do not whitelist without manual verification.
show less
Web Spam
Port Scan
Web App Attack
🇩🇪
bescared
2026-01-17 03:28:19
(4 months ago)
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet.
Port Scan
🇨🇦
1gz
2025-12-29 12:21:27
(5 months ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoin ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: 05qMXpofM6JNHmz
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
DDoS Attack
Bad Web Bot
🇨🇭
Modules
2025-12-16 01:28:13
(5 months ago)
Open proxy http://157.66.50.37:8080 (RT:5100ms,Loc:Indonesia,ASN:AS152438)
Open Proxy
🇸🇬
Fn4ticHz
2025-12-15 06:45:30
(5 months ago)
repeated ddos targeted load.rapidreset.net -- ZeroGuard
DDoS Attack