🇺🇸
TPI-Abuse
2026-01-19 14:42:21
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 09:42:19.180104 2026] [security2:error] [pid 21596:tid 21596] [client 130.49.216.53:56204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whirlpool.pamplonaserviciotecnico.com"] [uri "/.git/HEAD"] [unique_id "aW5Cy9bes4-N_4TgkYHRbAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-19 14:26:16
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 09:26:11.679041 2026] [security2:error] [pid 10116:tid 10116] [client 130.49.216.53:57234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.nrdtrade.com"] [uri "/.git/HEAD"] [unique_id "aW4_A9tYMdbxS8Bwx854hAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-01-19 14:17:32
(8 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 130.49.216.53 (NL/The Netherlands/-): ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 130.49.216.53 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇦🇺
2000cn.com.au
2026-01-19 10:52:48
(8 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Hacking
Web App Attack
🇺🇸
TJTheSpy
2026-01-19 10:00:30
(8 months ago)
130.49.216.53 - - [19/Jan/2026:02:58:33 -0700] "GET /.git/HEAD HTTP/1.1" 404 2208 "-" "Fuzz Faster U ...
show more
130.49.216.53 - - [19/Jan/2026:02:58:33 -0700] "GET /.git/HEAD HTTP/1.1" 404 2208 "-" "Fuzz Faster U Fool v2.1.0-dev"
130.49.216.53 - - [19/Jan/2026:02:58:33 -0700] "GET /.git/HEAD HTTP/1.1" 404 2208 "-" "Fuzz Faster U Fool v2.1.0-dev"
130.49.216.53 - - [19/Jan/2026:02:58:34 -0700] "GET /.git/HEAD HTTP/1.1" 404 2208 "-" "Fuzz Faster U Fool v2.1.0-dev"
130.49.216.53 - - [19/Jan/2026:02:59:10 -0700] "GET /.git/HEAD HTTP/1.1" 404 2208 "-" "Fuzz Faster U Fool v2.1.0-dev"
130.49.216.53 - - [19/Jan/2026:03:00:29 -0700] "GET /.git/HEAD HTTP/1.1" 404 2208 "-" "Fuzz Faster U Fool v2.1.0-dev"
...
show less
Bad Web Bot
🇬🇧
pinguin
2026-01-18 23:01:08
(8 months ago)
Triggered Cloudflare WAF (firewallManaged) from NL.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from NL.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/HEAD
UA: Fuzz Faster U Fool v2.1.0-dev
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Thaliruth
2026-01-18 00:34:50
(8 months ago)
[18/Jan/2026:01:34:50.680568 +0100] aWwqqk0tQXeX6TPwTVr8FwAAAJc 130.49.216.53 35978 127.0.0.1 7081
. ...
show more
[18/Jan/2026:01:34:50.680568 +0100] aWwqqk0tQXeX6TPwTVr8FwAAAJc 130.49.216.53 35978 127.0.0.1 7081
...
show less
Hacking
🇺🇸
TPI-Abuse
2026-01-17 22:31:30
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 17:31:24.648794 2026] [security2:error] [pid 3830415:tid 3830415] [client 130.49.216.53:40150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zarobot.robertmcatee.com"] [uri "/.git/HEAD"] [unique_id "aWwNvODcAdpdTuWF0EuXFQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-01-17 20:05:23
(8 months ago)
(mod_security) mod_security (id:949110) triggered by 130.49.216.53 (RU/Russia/-): N in the last X se ...
show more
(mod_security) mod_security (id:949110) triggered by 130.49.216.53 (RU/Russia/-): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-01-17 13:13:49
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 08:13:45.238482 2026] [security2:error] [pid 9094:tid 9094] [client 130.49.216.53:60710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.crypto-stamps.com"] [uri "/.git/HEAD"] [unique_id "aWuLCTNcI0QLs4Swl325VgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ISPLtd
2026-01-16 19:20:28
(8 months ago)
130.49.216.53 [16/Jan/2026:15:20:28 -0400] gloria.target.domain:80 URL:/.git/HEAD "GET /.git/HEAD
13 ...
show more
130.49.216.53 [16/Jan/2026:15:20:28 -0400] gloria.target.domain:80 URL:/.git/HEAD "GET /.git/HEAD
130.49.216.53 [16/Jan/2026:15:20:28 -0400] gloria.target.domain:80 URL:/.git/HEAD "GET /.git/HEAD
...
show less
Hacking
Web App Attack
🇬🇧
ISPLtd
2026-01-16 17:35:39
(8 months ago)
130.49.216.53 [16/Jan/2026:13:35:36 -0400] target.domain:80 URL:/.git/HEAD "GET /.git/HEAD
130.49.21 ...
show more
130.49.216.53 [16/Jan/2026:13:35:36 -0400] target.domain:80 URL:/.git/HEAD "GET /.git/HEAD
130.49.216.53 [16/Jan/2026:13:35:38 -0400] target.domain:443 URL:/.git/HEAD "GET /.git/HEAD
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-01-04 19:31:07
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 14:30:59.760976 2026] [security2:error] [pid 27364:tid 27364] [client 130.49.216.53:47242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "constructiondomex.com"] [uri "/.git/HEAD"] [unique_id "aVq_84oj41P7aRyoG06G-QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
2048
2026-01-04 19:17:51
(9 months ago)
2026-01-04T20:17:47.934425+01:00 machodeer.aeza.network kernel: [271219.251290] [UFW BLOCK] IN=ens3 ...
show more
2026-01-04T20:17:47.934425+01:00 machodeer.aeza.network kernel: [271219.251290] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=130.49.216.53 DST=92.246.136.99 LEN=60 TOS=0x00 PREC=0x40 TTL=55 ID=47972 DF PROTO=TCP SPT=34642 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-01-04T20:17:48.981057+01:00 machodeer.aeza.network kernel: [271220.297265] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=130.49.216.53 DST=92.246.136.99 LEN=60 TOS=0x00 PREC=0x40 TTL=55 ID=47973 DF PROTO=TCP SPT=34642 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-01-04T20:17:50.005138+01:00 machodeer.aeza.network kernel: [271221.320434] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=130.49.216.53 DST=92.246.136.99 LEN=60 TOS=0x00 PREC=0x40 TTL=55 ID=47974 DF PROTO=TCP SPT=34642 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇺🇸
TPI-Abuse
2026-01-04 19:08:21
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 130.49.216.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 14:08:14.143628 2026] [security2:error] [pid 17252:tid 17252] [client 130.49.216.53:51640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landex.auction"] [uri "/.git/HEAD"] [unique_id "aVq6nu9UDWLnprv-SoDlpQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack