2026-10-22 19:09:59
(3 days ago)
spam
Email Spam
🇩🇪
H. Hampel
2026-09-22 12:07:01
(1 month ago)
SMTP hacking.
Email Spam
Spoofing
Hacking
🇨🇦
TheGnome
2026-09-21 20:44:00
(1 month ago)
Spoofing
Bad Web Bot
Email Spam
Phishing
🇺🇸
TPI-Abuse
2026-08-25 16:32:43
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:32:34.949092 2026] [security2:error] [pid 19902:tid 20022] [client 54.37.197.47:62515] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.sasintegrated.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.sasintegrated.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ao3DohTYr0EgOzI6nV9onwAAAc0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Joe-Mark
2026-07-28 08:14:22
(2 months ago)
Spam Timestamp : 28-Jul-26 08:10 BlockList Provider Abusix DNSBL (100)
Email Spam
🇵🇱
TheWojtek
2026-07-09 07:47:20
(3 months ago)
Jul 9 09:47:20 hq postfix/smtpd[3037202]: NOQUEUE: reject: RCPT from 543719747.freechatapi.com[54.3 ...
show more
Jul 9 09:47:20 hq postfix/smtpd[3037202]: NOQUEUE: reject: RCPT from 543719747.freechatapi.com[54.37.197.47]: 554 5.7.1 Service unavailable; Client host [54.37.197.47] blocked using Guardian Mail; https://lookup.abusix.com/search?q=54.37.197.47; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<543719747.freechatapi.com>
...
show less
Email Spam
🇩🇪
WhiteShark
2026-02-15 07:20:44
(8 months ago)
freechatapi.com blocked due to abusive behavior, count=2 for IP 54.37.197.47
Email Spam
🇩🇪
WhiteShark
2026-01-29 06:53:22
(8 months ago)
freechatapi.com blocked due to abusive behavior
Email Spam
🇺🇸
TPI-Abuse
2025-10-31 22:03:32
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 18:03:24.865992 2025] [security2:error] [pid 6529:tid 6529] [client 54.37.197.47:37019] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.hometechllc.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.hometechllc.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aQUyLBQABPBn92SROqUiDAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-25 11:05:20
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 07:05:15.208175 2025] [security2:error] [pid 29120:tid 29120] [client 54.37.197.47:35899] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.donaldcoleman.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.donaldcoleman.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aPyu68Srlaij0WTIxB4L3gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-06 04:25:42
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 00:25:35.164786 2025] [security2:error] [pid 15029:tid 15029] [client 54.37.197.47:5505] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.joepaladino.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.joepaladino.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aLu3v_024DYX-HzEUaZGFQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-05 04:32:00
(1 year ago)
Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-08-04 04:26:08
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 04 00:26:02.163063 2025] [security2:error] [pid 28970:tid 28970] [client 54.37.197.47:3089] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.mwrn.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.mwrn.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aJA2WjpGvIENXndFHLVPjQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-25 18:48:34
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 25 14:48:30.538280 2025] [security2:error] [pid 14881:tid 14881] [client 54.37.197.47:33621] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.jkperis.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.jkperis.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aIPRfm-HXYiqAy-t5JKBIAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-22 10:35:18
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.197.47 (543719747.freechatapi.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 22 06:35:14.137674 2025] [security2:error] [pid 2866:tid 2866] [client 54.37.197.47:6843] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.albionglobalmarketing.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.albionglobalmarketing.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aH9pYj58cOvO7Fjia0cg_gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
