This IP address has been reported a total of
12
times from
11 distinct
sources.
130.49.79.81 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Switzerland
with 3
reports;
Italy
with 2
reports;
Netherlands
with 2
reports.
Over the same time period, 130.49.79.81 has changed
country of origin 3 times.
The most common categories in these recent reports were:
Web App Attack
5
times;
Bad Web Bot
4
times;
Hacking
1
time;
SQL Injection
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Not following 301 redirects — wasted requests | method: GET | path: /robots.txt | ua: Mozilla/5.0 (W ...
show moreNot following 301 redirects — wasted requests | method: GET | path: /robots.txt | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.23-SNAPS
show less
http-bad-user-agent - IP: 130.49.79.81 - time="2026-09-28T22:50:26+02:00" level=info msg="(555f66b4 ...
show morehttp-bad-user-agent - IP: 130.49.79.81 - time="2026-09-28T22:50:26+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 130.49.79.81 (NL/35830) : 4h ban on Ip 130.49.79.81" module=db
show less
[MonSep2809:41:12.1068772026][security2:error][pid3222496:tid3222549][client130.49.79.81:0]ModSecuri ...
show more[MonSep2809:41:12.1068772026][security2:error][pid3222496:tid3222549][client130.49.79.81:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"swisservers.com\"][uri\"/\"][unique_id\"aroaGI7fuXHvoYJsNBNEPAAAAFU\"]
show less
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 130.49.79.81 (-): 1 in the last 360 ...
show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 130.49.79.81 (-): 1 in the last 3600 secs
show less
(PERMBLOCK) 130.49.79.81 (-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Dire ...
show more(PERMBLOCK) 130.49.79.81 (-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
