|
🇺🇸
DiodeDave
|
|
Attempted access after blacklisting
|
Email Spam
|
|
🇩🇪
FD-IX
|
|
SMTP connection rejected due to combined.mail.abusix.zone listing.
|
Email Spam
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 51.79.6.227 (51796227.sapphirelanternmelody.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:29:45.930515 2026] [security2:error] [pid 20811:tid 20811] ...
show more
(mod_security) mod_security (id:210730) triggered by 51.79.6.227 (51796227.sapphirelanternmelody.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:29:45.930515 2026] [security2:error] [pid 20811:tid 20811] [client 51.79.6.227:24365] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.stacyfarm.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.stacyfarm.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "apWP2T2wZRB1e-bR2G0VDAAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 51.79.6.227 (51796227.sapphirelanternmelody.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:37:05.983373 2026] [security2:error] [pid 13120:tid 13120] ...
show more
(mod_security) mod_security (id:210730) triggered by 51.79.6.227 (51796227.sapphirelanternmelody.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:37:05.983373 2026] [security2:error] [pid 13120:tid 13120] [client 51.79.6.227:31433] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.a1laha.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.a1laha.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "apI3wRswgoLylI4rEoj0RgAAABI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 51.79.6.227 (51796227.sapphirelanternmelody.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:32:32.889602 2026] [security2:error] [pid 21060:tid 21060] ...
show more
(mod_security) mod_security (id:210730) triggered by 51.79.6.227 (51796227.sapphirelanternmelody.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:32:32.889602 2026] [security2:error] [pid 21060:tid 21060] [client 51.79.6.227:37611] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.imagineyourphotos.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.imagineyourphotos.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "ao2LYI1ff1RSopr0BHCG5wAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 51.79.6.227 (51796227.sapphirelanternmelody.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 12:17:46.800558 2026] [security2:error] [pid 12008:tid 12008] ...
show more
(mod_security) mod_security (id:210730) triggered by 51.79.6.227 (51796227.sapphirelanternmelody.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 12:17:46.800558 2026] [security2:error] [pid 12008:tid 12008] [client 51.79.6.227:64389] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.gallodestinationservices.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.gallodestinationservices.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "aoxuqs3mOqvj2KKge1xU5QAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
H. Hampel
|
|
Spam.
|
Email Spam
|
|
🇩🇪
H. Hampel
|
|
SMTP hacking.
|
Email Spam
Spoofing
Hacking
|
|
Anonymous
|
|
spam
|
Email Spam
|
|
🇵🇱
TheWojtek
|
|
Jul 9 09:46:40 hq postfix/smtpd[3036667]: NOQUEUE: reject: RCPT from 51796227.sapphirelanternmelody.uk[51.79.6.227]: 554 5.7.1 Service unavailable; Client host [51.79.6.227] blocked using Guardian Mail; https://lookup.abusix.com/search?q=51.79.6.227 ...
show more
Jul 9 09:46:40 hq postfix/smtpd[3036667]: NOQUEUE: reject: RCPT from 51796227.sapphirelanternmelody.uk[51.79.6.227]: 554 5.7.1 Service unavailable; Client host [51.79.6.227] blocked using Guardian Mail; https://lookup.abusix.com/search?q=51.79.6.227; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<51796227.sapphirelanternmelody.uk>
...
show less
|
Email Spam
|
|
Anonymous
|
|
TRAPPED EMAIL 51.79.6.227 (51796227.sapphirelanternmelody.uk)
|
Email Spam
|
|
🇵🇱
TheWojtek
|
|
Jun 1 13:54:09 hq postfix/smtpd[2031636]: NOQUEUE: reject: RCPT from 51796227.sapphirelanternmelody.uk[51.79.6.227]: 554 5.7.1 Service unavailable; Client host [51.79.6.227] blocked using Guardian Mail; https://lookup.abusix.com/search?q=51.79.6.227 ...
show more
Jun 1 13:54:09 hq postfix/smtpd[2031636]: NOQUEUE: reject: RCPT from 51796227.sapphirelanternmelody.uk[51.79.6.227]: 554 5.7.1 Service unavailable; Client host [51.79.6.227] blocked using Guardian Mail; https://lookup.abusix.com/search?q=51.79.6.227; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<51796227.sapphirelanternmelody.uk>
...
show less
|
Email Spam
|
|
🇺🇸
DiodeDave
|
|
Attempted access after blacklisting
|
Email Spam
|
|
🇺🇸
DiodeDave
|
|
Attempted access after blacklisting
|
Email Spam
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 51.79.6.227 (51796227.sapphirelanternmelody.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 13:37:02.012788 2025] [security2:error] [pid 11394:tid 11394] ...
show more
(mod_security) mod_security (id:210730) triggered by 51.79.6.227 (51796227.sapphirelanternmelody.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 13:37:02.012788 2025] [security2:error] [pid 11394:tid 11394] [client 51.79.6.227:51043] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.bendergloves.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.bendergloves.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "aPpnvlXMk5PzaEQVn2d1oAAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
