🇺🇸
TPI-Abuse
2026-11-10 13:49:33
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:49:28.410629 2026] [security2:error] [pid 11177:tid 11177] [client 130.49.9.211:49947] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:49:28.410629 2026] [security2:error] [pid 11177:tid 11177] [client 130.49.9.211:49947] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.painting-with-numbers.com"] [uri "/blog/keep-fixing-it"] [unique_id "avMg6A-EFGT1E0eZQacqrwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:28:33
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210350) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:28:25.139076 2026] [security2:error] [pid 14714:tid 14714] [client 130.49.9.211:53069] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:28:25.139076 2026] [security2:error] [pid 14714:tid 14714] [client 130.49.9.211:53069] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.chrisbilder.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.chrisbilder.com"] [uri "/multivariate/camrelay2013/11-18-13.html"] [unique_id "avKBSWinfVGrQMJsRcTxIgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:23:41
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:23:38.230313 2026] [security2:error] [pid 21256:tid 21256] [client 130.49.9.211:30635] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:23:38.230313 2026] [security2:error] [pid 21256:tid 21256] [client 130.49.9.211:30635] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.leveeboard.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.leveeboard.org"] [uri "/about_the_levee/history/physical_development.html"] [unique_id "avFm6j2RsBsMrEyPVkmmAwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 18:30:56
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:30:49.569243 2026] [security2:error] [pid 32312:tid 32312] [client 130.49.9.211:62383] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:30:49.569243 2026] [security2:error] [pid 32312:tid 32312] [client 130.49.9.211:62383] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cometoorderva.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cometoorderva.com"] [uri "/cto-recommends-neat-receipts-for-organizing-tax-information/"] [unique_id "au9uWfY0sI1CoZPHsPG_QAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 20:08:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:07:56.399363 2026] [security2:error] [pid 3219:tid 3219] [client 130.49.9.211:37655] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:07:56.399363 2026] [security2:error] [pid 3219:tid 3219] [client 130.49.9.211:37655] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vincentmonaco.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vincentmonaco.com"] [uri "/earlywork.html"] [unique_id "atkbnKCrmETKMaeVd3ncWgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-11 01:50:02
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.9.211
2026-09-11T03:02:38+02:00 vpn Access-Reject 'Ezeamama_Williams' station: 130.49.9.211 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: ' ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.9.211
2026-09-11T03:02:38+02:00 vpn Access-Reject 'Ezeamama_Williams' station: 130.49.9.211 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-09 19:49:51
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.9.211
2026-09-09T20:26:00+02:00 vpn Access-Reject 'mosheg' station: 130.49.9.211 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 15:50:22
UTC ·
(5 months ago)
(mod_security) mod_security (id:218580) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 11:50:16.987864 2026] [security2:error] [pid 1111:tid 1111] [client 130.49.9.211:31561] ModSe ...
show more
(mod_security) mod_security (id:218580) triggered by 130.49.9.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 11:50:16.987864 2026] [security2:error] [pid 1111:tid 1111] [client 130.49.9.211:31561] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\*[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:callsign. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.||www.3905ccn.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.3905ccn.org"] [uri "/awardsByCallsign.php"] [unique_id "ahB7ONDtlWOqzeP4zk1FoQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-03-10 09:59:59
UTC ·
(8 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
2026-01-23 05:38:17
UTC ·
(9 months ago)
wordpress-trap
Web App Attack
🇺🇸
octageeks.com
2026-01-18 05:06:57
UTC ·
(9 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇨🇭
backslash
2026-01-03 18:00:13
UTC ·
(10 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇳🇱
ipoac.nl
2025-12-27 10:10:15
UTC ·
(10 months ago)
2025-12-27T11:10:14.875152+01:00 ipoac.nl wordpress(-)-: Authentication failure for-from 130.49.9.211
Web App Attack
🇺🇸
nowyouknow
2025-12-19 02:39:56
UTC ·
(10 months ago)
(From [email protected] ) Hello Team,
I typed your main service keywords into Google today, and I noticed something frustrating. Your website is professionally designed, but it’s buried on Page 2.
Meanwhile, 2 or 3 of your direct competi ...
show more
(From [email protected] ) Hello Team,
I typed your main service keywords into Google today, and I noticed something frustrating. Your website is professionally designed, but it’s buried on Page 2.
Meanwhile, 2 or 3 of your direct competitors, who frankly have weaker websites than you—are sitting at the top of Page 1.
They are effectively "stealing" leads that were looking for you. They aren't better than you; they just have better SEO signals.
I’ve already analyzed exactly what they are doing differently.
If you want to see the comparison report, just reply "Yes" and I’ll send it over.
Cheers,
QIK
show less
Phishing
Web Spam
