🇮🇳
Aleksa Krstic
2026-06-01 04:17:19
(2 weeks ago)
ShadowMap takedown: Phishing targeting Mahindra Lifespaces. Reference: SBTD-7TAY5RGMVK. URL: https:/ ...
show more
ShadowMap takedown: Phishing targeting Mahindra Lifespaces. Reference: SBTD-7TAY5RGMVK. URL: https://www.mahindrahappinest.official-support.in. Authorized brand-protection report by Security Brigade.
show less
Phishing
2025-11-03 14:04:23
(7 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-11-03 14:03:46
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 149.86.225.44 (calcium.scnservers.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 149.86.225.44 (calcium.scnservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 09:03:42.694166 2025] [security2:error] [pid 11168:tid 11168] [client 149.86.225.44:34834] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.directcch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.directcch.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aQi2PqpQ4QfkFWaoYfbaPAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2025-11-02 01:10:21
(7 months ago)
Sourced 1 spam messages over 3x XMissions threshold. Highest score: 29.4. Latest msgid suffix: ...71 ...
show more
Sourced 1 spam messages over 3x XMissions threshold. Highest score: 29.4. Latest msgid suffix: ...71640be43b
show less
Email Spam
2025-10-16 11:00:52
(8 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-10-16 10:54:41
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 149.86.225.44 (calcium.scnservers.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 149.86.225.44 (calcium.scnservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 16 06:54:36.419854 2025] [security2:error] [pid 24286:tid 24286] [client 149.86.225.44:38348] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.sutherlandyogastudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.sutherlandyogastudio.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aPDO7PyWx2CHoWp4hMBJpgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
57starchief
2024-07-19 22:47:00
(1 year ago)
tinnitus cure page
DNS Poisoning
Email Spam
🇩🇪
Fusl
2023-10-27 12:01:06
(2 years ago)
received unsolicited smtp data stream:
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relax ...
show more
received unsolicited smtp data stream:
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=beedgeorai.in; s=default; h=Subject:From:To:MIME-Version:Date:Message-ID:
Content-Type:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=a4uVDhEsPnEe6ZRGiLWVxMwF4+BvIl5CVZZM0RTqttE=; b=SMpm3AFSyUP7cq5e5H80fmZxqT
up+FiwZd5kLzk/2aWqbetjDIrDaNZyELI6K8L9jWxbYSuZKqoOZtli4lfIZSHCJAPmjtiaMR06cvC
gYGdRbqwz0j8VcZCvF/b+TFy0Gr7gurXQ2UtuKAgVV9i+tm2x/0vbXIUzj/d8TgsIxz2ljnmYdvoZ
cRvAK65RVfi2XZ2+Uvo9em25Rb+ZrlHKH1Nrb2GwN88EgHJEr4JfreETjSAU/H8/E43pdHvzmccS8
fzXOU2wDoYkA0kEm1w9m+qcTsa4thgIqy1zXsNX8EPmX8Y2uflNXhXdemdnDR9KNFpWnaRltZ0ITu
mYg6yiVQ==;
Received: from [49.36.144.105] (port=62902 helo=beedgeorai.in)
by calcium.scnservers.net with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
show less
Email Spam
🇮🇳
Umang Srivastava
2022-10-12 13:55:32
(3 years ago)
This fraudulent/fake website is impersonating https://www.godrejproperties.com
This website contain ...
show more
This fraudulent/fake website is impersonating https://www.godrejproperties.com
This website contains Godrej Properties' name, logo, project details, and product images that are being unlawfully used to cheat people out of money. This is a fake Godrej Properties website and this website is unauthorized to use brand elements of Godrej Properties.
show less
Fraud Orders
Phishing
Fraud VoIP
Web Spam
Spoofing