🇺🇸
64.31.50.131
21 Apr 2026
samsregistration.com spam. Attempting to pose as SAM.gov
Email Spam
🇺🇸
94.131.48.18
16 Apr 2026
Attempted to password reset on a company account. Policies shut it down entirely.
Hacking
Web App Attack
🇺🇸
51.81.155.128
01 Dec 2025
Brute-Forcing quite a lot. A yes amount of times. Total Count: 289 entries within 30 seconds
Brute-Force
🇺🇸
162.215.174.50
21 Nov 2025
Targeted a company Email address ->
Email {
Microsoft 365
We are deactivating your account to ...
show more
Targeted a company Email address ->
Email {
Microsoft 365
We are deactivating your account today 11/21/2025.
Confirm if your (<redacted email>) is still active with the button below to enable us secure your account.
}
Url: https://www.google.cf/url?q=https%3A%2F%2Fgamaelectrica.com.mx%2FOwotide&sa=D&sntz=1&usg=AOvVaw0486KlCKVwpAc688BSgi1i#?0088349003Family=YnJ5YW5AdGVraXN0cnkuY29t
show less
Phishing
Email Spam
🇺🇸
74.82.47.25
04 Oct 2025
DATE: 2025-09-27
TIME: 17:41:19
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-09-27
TIME: 17:41:19
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
64.62.156.207
04 Oct 2025
DATE: 2025-10-01
TIME: 07:44:42
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-10-01
TIME: 07:44:42
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
64.62.197.223
04 Oct 2025
DATE: 2025-09-28
TIME: 17:43:25
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-09-28
TIME: 17:43:25
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
65.49.1.34
04 Oct 2025
DATE: 2025-09-26
TIME: 09:29:32
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-09-26
TIME: 09:29:32
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
65.49.1.116
04 Oct 2025
DATE: 2025-10-02
TIME: 09:35:14
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-10-02
TIME: 09:35:14
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
74.82.47.51
04 Oct 2025
DATE: 2025-10-03
TIME: 08:26:02
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-10-03
TIME: 08:26:02
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
65.49.1.100
04 Oct 2025
DATE: 2025-10-01
TIME: 10:30:11
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-10-01
TIME: 10:30:11
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
216.218.206.122
04 Oct 2025
DATE: 2025-09-28
TIME: 10:00:38
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-09-28
TIME: 10:00:38
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
64.62.197.183
04 Oct 2025
DATE: 2025-09-26
TIME: 07:48:13
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-09-26
TIME: 07:48:13
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
184.105.139.82
04 Oct 2025
DATE: 2025-10-02
TIME: 07:39:18
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-10-02
TIME: 07:39:18
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
138.197.16.14
04 Oct 2025
DATE: 2025-10-01
TIME: 04:43:38
TYPE: "IPS"
SEVERITY: "high"
SRCCOUNTRY: "United States"
ACTION ...
show more
DATE: 2025-10-01
TIME: 04:43:38
TYPE: "IPS"
SEVERITY: "high"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Bladabindi.Botnet"
DIRECTION: "outgoing"
MSG: "backdoor: Bladabindi.Botnet,"
show less
DDoS Attack
Bad Web Bot
🇺🇸
64.62.197.135
04 Oct 2025
DATE: 2025-09-30
TIME: 07:45:04
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-09-30
TIME: 07:45:04
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
65.49.1.136
04 Oct 2025
DATE: 2025-09-30
TIME: 07:29:07
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-09-30
TIME: 07:29:07
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
184.105.247.212
04 Oct 2025
DATE: 2025-09-27
TIME: 09:11:29
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-09-27
TIME: 09:11:29
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇧🇬
79.124.58.198
04 Oct 2025
DATE: 2025-09-26
TIME: 06:17:09
TYPE: "IPS"
SEVERITY: "high"
SRCCOUNTRY: "Bulgaria"
ACTION: "dr ...
show more
DATE: 2025-09-26
TIME: 06:17:09
TYPE: "IPS"
SEVERITY: "high"
SRCCOUNTRY: "Bulgaria"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "HTTP.XXE"
PATH: "/Autodiscover/Autodiscover.xml"
DIRECTION: "outgoing"
MSG: "applications3: HTTP.XXE,"
show less
Hacking
Web App Attack
🇺🇸
216.218.206.103
04 Oct 2025
DATE: 2025-10-03
TIME: 09:18:24
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-10-03
TIME: 09:18:24
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
64.62.156.222
04 Oct 2025
DATE: 2025-09-29
TIME: 02:21:14
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-09-29
TIME: 02:21:14
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇺🇸
66.240.205.34
04 Oct 2025
DATE: 2025-09-28
TIME: 04:55:08
TYPE: "IPS"
SEVERITY: "high"
SRCCOUNTRY: "United States"
ACTION ...
show more
DATE: 2025-09-28
TIME: 04:55:08
TYPE: "IPS"
SEVERITY: "high"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Gh0st.Rat.Botnet"
DIRECTION: "outgoing"
MSG: "backdoor: Gh0st.Rat.Botnet,"
show less
DDoS Attack
Bad Web Bot
🇺🇸
45.88.186.85
04 Oct 2025
DATE: 2025-10-03
TIME: 09:59:12
TYPE: "IPS"
SEVERITY: "critical"
SRCCOUNTRY: "United States"
AC ...
show more
DATE: 2025-10-03
TIME: 09:59:12
TYPE: "IPS"
SEVERITY: "critical"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Bash.Function.Definitions.Remote.Code.Execution"
PATH: "/"
DIRECTION: "outgoing"
MSG: "applications3: Bash.Function.Definitions.Remote.Code.Execution,"
show less
Hacking
Web App Attack
🇺🇸
65.49.1.137
04 Oct 2025
DATE: 2025-09-26
TIME: 20:30:01
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTI ...
show more
DATE: 2025-09-26
TIME: 20:30:01
TYPE: "IPS"
SEVERITY: "medium"
SRCCOUNTRY: "United States"
ACTION: "dropped"
SERVICE: "HTTP"
ATTACK: "Apache.APR.PSPrintf.Memory.Corruption"
PATH: "/"
DIRECTION: "outgoing"
MSG: "web_server: Apache.APR.PSPrintf.Memory.Corruption,"
show less
DNS Compromise
Hacking
🇩🇪
45.130.203.169
24 Sep 2025
WAF trigger http://<redacted>/.git/HEAD
Brute-Force
Bad Web Bot
Web App Attack