64.49.39.32

(mod_security) mod_security (id:210350) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 22:04:05.783711 2026] [security2:error] [pid 25147:tid 25147] [client 64.49.39.32:63209] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 22:04:05.783711 2026] [security2:error] [pid 25147:tid 25147] [client 64.49.39.32:63209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.sarahpeebles.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.sarahpeebles.net"] [uri "/tokyo.htm"] [unique_id "au6VJYDUPOW3l7Rz7UvKewAAABI"] show less

(mod_security) mod_security (id:210350) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:39:48.081563 2026] [security2:error] [pid 29008:tid 29008] [client 64.49.39.32:21131] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:39:48.081563 2026] [security2:error] [pid 29008:tid 29008] [client 64.49.39.32:21131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/us-postal-service/"] [unique_id "auh2hA980zk4mQ6Tu-mmqAAAAAU"] show less

(mod_security) mod_security (id:210350) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:33:05.348852 2026] [security2:error] [pid 9142:tid 9142] [client 64.49.39.32:34191] ModSecu ... show more (mod_security) mod_security (id:210350) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:33:05.348852 2026] [security2:error] [pid 9142:tid 9142] [client 64.49.39.32:34191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thenewplantation.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thenewplantation.org"] [uri "/memes-meant-to-boil-the-blood-of-the-fragile-or-memes-for-liberals/"] [unique_id "auW10czxx2LGRN3M4IlPhAAAABM"] show less

(mod_security) mod_security (id:210350) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:36:14.648099 2026] [security2:error] [pid 19159:tid 19159] [client 64.49.39.32:45573] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:36:14.648099 2026] [security2:error] [pid 19159:tid 19159] [client 64.49.39.32:45573] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.stationrestaurant.ca|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.stationrestaurant.ca"] [uri "/contact-2/"] [unique_id "at6ujhfs-SsxBMTim3KVuQAAAAM"] show less

(mod_security) mod_security (id:210730) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:16:14.327198 2026] [security2:error] [pid 20040:tid 20040] [client 64.49.39.32:17785] ModSe ... show more (mod_security) mod_security (id:210730) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:16:14.327198 2026] [security2:error] [pid 20040:tid 20040] [client 64.49.39.32:17785] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Cooper/Thumbs.db"] [unique_id "asI1ftIeQbnST3TV_a14pgAAAA4"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Cooper/ show less

Failed Wordpress Logins

Web attack/malicious scanning detected

Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -47.325 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1806.4

(mod_security) mod_security (id:210730) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:42:31.438740 2026] [security2:error] [pid 5738:tid 5738] [client 64.49.39.32:40569] ModSecu ... show more (mod_security) mod_security (id:210730) triggered by 64.49.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:42:31.438740 2026] [security2:error] [pid 5738:tid 5738] [client 64.49.39.32:40569] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Addison/Thumbs.db"] [unique_id "ah-wt8CNq_iZ4mj5RwLnCAAAAAw"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Addison/ show less

[AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 1 | First: 2026-05-21T07:06:32+02:00 | Last: 2026-05-21T07:06:32+02:00 Samples: POST /xmlrpc.php [200]

block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE

block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE

Unauthorized VPN login attempts: 1 attempts were recorded from 64.49.39.32 2026-02-24T02:33:53+01:00 vpn Access-Reject 'user123' station: 64.49.39.32 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'

Unauthorized VPN login attempts: 1 attempts were recorded from 64.49.39.32 2026-02-23T18:11:05+01:00 vpn Access-Reject 'apiuser' station: 64.49.39.32 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'

Unauthorized VPN login attempts: 1 attempts were recorded from 64.49.39.32 2026-02-23T05:51:06+01:00 vpn Access-Reject 'support' station: 64.49.39.32 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'