JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

130.49.10.202

Recent Activity

Abuse Confidence Score

57% Elevated

31 reports

19 reporters · latest 9 hours ago

ISP: Fine Group Servers Solutions LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS59651
Domain Name: finegroupservers.com
Country: 🇺🇸 United States of America
City: New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

31 from 19 distinct reporters

First reported

January 22nd 2026

Most recent report

9 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 8 🇨🇭 Switzerland 2 🇦🇹 Austria 1

Most common categories Web App Attack 13 Bad Web Bot 11 Brute-Force 9 Hacking 2 DDoS Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-15 13:36:21 UTC · (9 hours ago)	(mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:36:17.438540 2026] [security2:error] [pid 10842:tid 10842] [client 130.49.10.202:56815] M ... show more (mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:36:17.438540 2026] [security2:error] [pid 10842:tid 10842] [client 130.49.10.202:56815] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.ctrussell.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/e7db3006c018c1c4862566bd000abc75/96a1fac37d8ee42686256b2d0051a05f_7b4ad6db.html"] [unique_id "avm1UYX20rszOirsqaVaFgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-11-15 00:10:52 UTC · (22 hours ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-11-14 01:33:04 UTC · (1 day ago)	(mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:32:56.975946 2026] [security2:error] [pid 22168:tid 22168] [client 130.49.10.202:51187] M ... show more (mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:32:56.975946 2026] [security2:error] [pid 22168:tid 22168] [client 130.49.10.202:51187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tulsatvmemories.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/chew2011/rum"] [unique_id "ave6SCubII9ZqD8cnqeCUQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-13 03:49:38 UTC · (2 days ago)	Banned by Fail2Ban on server	Web App Attack
🇺🇸 TPI-Abuse	2026-11-12 02:49:04 UTC · (3 days ago)	(mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:49:01.349430 2026] [security2:error] [pid 12799:tid 12799] [client 130.49.10.202:58049] M ... show more (mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:49:01.349430 2026] [security2:error] [pid 12799:tid 12799] [client 130.49.10.202:58049] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.eroticperfection.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.eroticperfection.com"] [uri "/scj/cgi/out.php"] [unique_id "avUpHdmF4FXf8R4c3g0wXwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Zandro	2026-11-10 12:00:14 UTC · (5 days ago)	distributed harvester	DDoS Attack Bad Web Bot Exploited Host
🇪🇸 librebit	2026-11-10 02:40:34 UTC · (5 days ago)	RDWeb scan	Web App Attack
🇦🇹 neo72	2026-11-09 06:54:06 UTC · (6 days ago)	Detected malicious activity - bulk block	Brute-Force Web App Attack
Anonymous	2026-11-07 01:28:06 UTC · (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇨🇭 Origon	2026-11-04 05:49:56 UTC · (1 week ago)	http-bad-user-agent - IP: 130.49.10.202 - time="2026-11-04T06:49:55+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 130.49.10.202 (NL/59651) : 4h ban on Ip 130.49.10.202" mod ... show more http-bad-user-agent - IP: 130.49.10.202 - time="2026-11-04T06:49:55+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 130.49.10.202 (NL/59651) : 4h ban on Ip 130.49.10.202" module=db show less	Bad Web Bot
🇨🇭 4server	2026-11-01 21:26:34 UTC · (2 weeks ago)	[SunNov0122:26:28.0245482026][security2:error][pid3399765:tid3399842][client130.49.10.202:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-B ... show more [SunNov0122:26:28.0245482026][security2:error][pid3399765:tid3399842][client130.49.10.202:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.hosting-dominio.com\"][uri\"/robots.txt\"][unique_id\"aueuhJATXU1SP1LTZ7T7CwAAAQY\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-28 20:32:36 UTC · (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:32:30.025837 2026] [security2:error] [pid 21728:tid 21728] [client 130.49.10.202:64195] M ... show more (mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:32:30.025837 2026] [security2:error] [pid 21728:tid 21728] [client 130.49.10.202:64195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|montgomeryhistoricalsociety.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "montgomeryhistoricalsociety.org"] [uri "/MHSNews0123.html"] [unique_id "auJb3n78HqCwOu9GzrGPFgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-28 18:15:43 UTC · (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:15:39.069152 2026] [security2:error] [pid 4582:tid 4582] [client 130.49.10.202:57925] Mod ... show more (mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:15:39.069152 2026] [security2:error] [pid 4582:tid 4582] [client 130.49.10.202:57925] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|arsenalfordemocracy.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2017/08/16/ep-192-how-to-nationalize-us-oil-and-gas-aug-16-2017/"] [unique_id "auI7y_7N_qZ-F2uroJ6nEQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 07:52:39 UTC · (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:52:34.580173 2026] [security2:error] [pid 9614:tid 9809] [client 130.49.10.202:24547] Mod ... show more (mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:52:34.580173 2026] [security2:error] [pid 9614:tid 9809] [client 130.49.10.202:24547] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|freeziyadyaghi.info\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "freeziyadyaghi.info"] [uri "/poems.htm"] [unique_id "athvQtBl1mami7QRRRdGOAAAAlE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 12:50:38 UTC · (1 month ago)	(mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:50:34.354789 2026] [security2:error] [pid 5274:tid 5274] [client 130.49.10.202:26767] Mod ... show more (mod_security) mod_security (id:210350) triggered by 130.49.10.202 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:50:34.354789 2026] [security2:error] [pid 5274:tid 5274] [client 130.49.10.202:26767] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|stlrosesociety.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stlrosesociety.org"] [uri "/St Louis Area monthly tips.html"] [unique_id "atDMGriojASl_JRzUiwuwQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇪 141.145.159.132

🇳🇱 85.155.15.97

🇮🇳 43.225.165.29

🇻🇳 203.210.221.139

🇧🇷 191.252.153.112

🇮🇶 178.210.224.155

🇺🇸 172.110.27.30

🇵🇭 120.29.89.124

🇨🇳 111.53.185.153

🇶🇦 78.101.196.18

🇬🇧 5.226.140.65

🇺🇸 162.216.150.35

🇺🇸 161.115.234.3

🇬🇧 123.58.207.127

🇺🇸 52.0.63.151

🇻🇳 42.114.103.121

🇺🇸 34.192.67.98

🇬🇧 157.22.127.139

🇺🇸 137.184.131.11

🇷🇺 79.126.72.199