JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.195.243.19

130.195.243.19 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 43%: ?

43%

ISP	M247 Europe - Vilnius Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.195.243.19

Whois 130.195.243.19

IP Abuse Reports for 130.195.243.19:

This IP address has been reported a total of 24 times from 16 distinct sources. 130.195.243.19 was first reported on October 26th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-03 04:44:08 (1 week ago)	[osotir.org] httpd-xmlrpc-post: sites=www.agonistes.gr; logs=/var/log/httpd/domains/agonistes.gr.log ... show more [osotir.org] httpd-xmlrpc-post: sites=www.agonistes.gr; logs=/var/log/httpd/domains/agonistes.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-10-02 21:59:20 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-01. show less	Web App Attack SSH Hacking
🇳🇱 Alt255	2026-10-01 17:23:15 (2 weeks ago)	[cb-09al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-09al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 130.195.243.19 - - [01/Oct/2026:19:23:14 +0200] "GET /.env HTTP/2.0" 301 364 "-" "Mozilla/5.0 (Linux; Android 10; Pixel 3 XL) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.135 Mobile Safari/537.36 EdgA/134.0.3124.68" ... show less	Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-10-01 17:15:03 (2 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-01 17:10:48 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 130.195.243.19 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 130.195.243.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:10:41.470129 2026] [security2:error] [pid 12229:tid 12229] [client 130.195.243.19:57804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "franzexpress.com"] [uri "/.env"] [unique_id "ar6UET7NfMnz9trEOkDmCwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-01 15:22:36 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.budyn.xyz \| URI: /.env.example \| UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Mobile Safari/537.3 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-01 11:59:04 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 130.195.243.19 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 130.195.243.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 07:58:57.424512 2026] [security2:error] [pid 26168:tid 26168] [client 130.195.243.19:56740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "velocity40.com"] [uri "/.env.example"] [unique_id "ar5LATaB8QS4dA3o03oevwAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-01 10:10:43 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 130.195.243.19 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 130.195.243.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 06:10:38.852318 2026] [security2:error] [pid 2938:tid 2938] [client 130.195.243.19:2450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mvseasea.com"] [uri "/.env.example"] [unique_id "ar4xnqkK-WLnzDc1Cwlg8AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-01 10:05:02 (2 weeks ago)	apache vulnerability scan	Web App Attack
🇵🇱 Budyn	2026-10-01 09:44:54 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jira.sweetpuddingtrap.top \| URI: /.env.example \| UA: Mozilla/5.0 (X11; Linux i686; rv:136.0) Gecko/20100101 Firefox/136.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-01 09:43:06 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 130.195.243.19 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 130.195.243.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 05:43:02.555271 2026] [security2:error] [pid 6366:tid 6366] [client 130.195.243.19:32763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smid.tv"] [uri "/.env.example"] [unique_id "ar4rJlPi28O3SVjzCrGjyQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 DamonOne	2026-09-30 21:15:43 (2 weeks ago)	Blocked by OPNsense; 18 hits, proto=tcp, ports=31435,46030,59841	Port Scan Hacking
🇺🇸 xmission.com	2026-09-16 05:16:33 (1 month ago)	Blocked by UFW (TCP on 51413) Source port: 38144 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 38144 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 130.195.243.19) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 demonsword	2026-05-08 15:13:53 (5 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: 78.107.250.196:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-04-29 19:02:12 (5 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: 78.107.250.196:443 show less	Open Proxy Port Scan

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.63.223.138

🇷🇺 188.234.165.67

🇺🇸 184.176.134.101

🇰🇷 118.37.214.187

🇧🇩 103.124.30.68

🇳🇱 85.203.42.126

🇧🇬 79.124.62.134

🇰🇷 219.248.4.146

🇮🇩 210.87.83.227

🇻🇳 210.86.226.51

🇮🇩 114.12.17.98

🇳🇱 77.239.124.36

🇸🇬 51.79.205.241

🇭🇰 216.118.231.170

🇫🇷 185.177.72.38

🇺🇸 107.143.73.164

🇮🇳 103.248.35.78

🇧🇩 103.94.129.8

🇮🇷 78.109.200.147

🇺🇸 71.6.134.231