This IP address has been reported a total of
31
times from
15 distinct
sources.
130.49.79.241 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
SSH tarpit (endlessh) connection from 130.49.79.241
[ThuOct1502:16:34.4823182026][security2:error][pid3189086:tid3189156][client130.49.79.241:0]ModSecur ...
show more[ThuOct1502:16:34.4823182026][security2:error][pid3189086:tid3189156][client130.49.79.241:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"gruppobalu.com\"][uri\"/webmail\</a\>\"][unique_id\"atAbYnPbCB42YRMAyWFcSgAAAIQ\"]
show less
Port Scan
Brute-Force
Web App Attack
Anonymous
SSH tarpit (endlessh) connection from 130.49.79.241
This address crawls our sites under a User-Agent that belongs to a known abusive scraper, or under a ...
show moreThis address crawls our sites under a User-Agent that belongs to a known abusive scraper, or under a placeholder identity no legitimate software uses. Such crawlers load servers with automated requests nobody asked for and often harvest content or e-mail addresses; blocked. Please check what runs on this address. | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.23-SNAPS | path: /(max-width:1199.98px) (+1 more) | 2026-09-24 23:27 UTC
show less