2026-10-20 16:22:07
(3 days ago)
SPAM EMAIL 130.255.126.223 (epcan.link)
Email Spam
🇩🇪
wlt-blocker
2026-10-20 15:44:58
(3 days ago)
Spam with a high level and/or caught by honeypot detected
Email Spam
🇺🇸
TPI-Abuse
2026-09-25 08:22:43
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 04:22:36.301224 2026] [security2:error] [pid 24719:tid 24719] [client 130.255.126.223:39312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vicsflooring.com"] [uri "/.env"] [unique_id "arYvTOQ1VP2HzJTTTrRLDwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 07:12:27
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 03:12:23.336129 2026] [security2:error] [pid 14323:tid 14323] [client 130.255.126.223:55764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powderriverinc.com"] [uri "/.env"] [unique_id "arYe1_3GjMYnrnn__Pe8oQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 21:38:02
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:37:54.135637 2026] [security2:error] [pid 20624:tid 20624] [client 130.255.126.223:58322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menagri.com"] [uri "/wp-config.php.bak"] [unique_id "arL1Ms_SFT81iAemVYWArgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:10:09
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:10:04.607619 2026] [security2:error] [pid 30022:tid 30022] [client 130.255.126.223:48902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "renegadestudios.com"] [uri "/wp-config.php.bak"] [unique_id "arLSjFE7uc7OC-fLSICdwgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:01:17
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:01:12.933929 2026] [security2:error] [pid 17068:tid 17408] [client 130.255.126.223:42248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saryagroup.pershia.net"] [uri "/wp-config.php.bak"] [unique_id "arKmSPuecq6lxMmvzJOU2gAAAY8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:33:43
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:33:35.729792 2026] [security2:error] [pid 18267:tid 18267] [client 130.255.126.223:43198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "onlinesoldier.com"] [uri "/wp-config.php.bak"] [unique_id "arKfz94MTfam4u-HOWvwswAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:49:26
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:49:20.585621 2026] [security2:error] [pid 8560:tid 8560] [client 130.255.126.223:34264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edwardchrisman.com"] [uri "/wp-config.php.bak"] [unique_id "arKHYD1hqE_n_QAmnz1_qgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:21:40
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:21:34.773796 2026] [security2:error] [pid 619:tid 733] [client 130.255.126.223:53252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adprosfla.com"] [uri "/wp-config.php.bak"] [unique_id "arKA3l-3JMEVq51yEz-uKAAAAQ4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:01:59
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:01:55.537444 2026] [security2:error] [pid 10642:tid 10642] [client 130.255.126.223:56412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "memotronic.com"] [uri "/wp-config.php.bak"] [unique_id "arJuM6YmheFVLVPO6mICrAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 11:34:59
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:34:54.180405 2026] [security2:error] [pid 27507:tid 27507] [client 130.255.126.223:60494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thrivebeyondtoxic.com"] [uri "/wp-config.php.bak"] [unique_id "arJn3gjnUhfneLILs9tUrAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 09:58:59
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:58:53.755176 2026] [security2:error] [pid 500292:tid 500292] [client 130.255.126.223:45426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lobibilisim.com"] [uri "/wp-config.php.bak"] [unique_id "arJRXSZB4xGAXehDITGF7AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 09:26:24
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 130.255.126.223 (web.epcan.email): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:26:18.446561 2026] [security2:error] [pid 16923:tid 16923] [client 130.255.126.223:37632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lemontreefoods.com"] [uri "/wp-config.php.bak"] [unique_id "arJJupI1c5wvzD_HSut7QQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
