JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.49.11.114

130.49.11.114 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 23%: ?

23%

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.49.11.114

Whois 130.49.11.114

IP Abuse Reports for 130.49.11.114:

This IP address has been reported a total of 17 times from 8 distinct sources. 130.49.11.114 was first reported on April 14th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-09-19 23:27:15 (12 hours ago)	[SunSep2001:27:09.2596562026][security2:error][pid3747420:tid3747545][client130.49.11.114:0]ModSecur ... show more [SunSep2001:27:09.2596562026][security2:error][pid3747420:tid3747545][client130.49.11.114:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"leonitraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq8aTb65roD8Bqoc5d8Q9AAAARY\"] show less	Hacking Web App Attack
🇩🇪 4server	2026-09-16 14:18:30 (3 days ago)	[WedSep1616:18:28.3532012026][security2:error][pid795348:tid795517][client130.49.11.114:0]ModSecurit ... show more [WedSep1616:18:28.3532012026][security2:error][pid795348:tid795517][client130.49.11.114:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ci-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqqlNEjnPyP5Rtp8aLxaAAAAAMk\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-09-12 12:02:25 (1 week ago)	[SatSep1214:02:20.3458662026][security2:error][pid3160517:tid3160632][client130.49.11.114:0]ModSecur ... show more [SatSep1214:02:20.3458662026][security2:error][pid3160517:tid3160632][client130.49.11.114:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"studio-portale.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqU_TJkVAdQr97irjFCmCQAAAIA\"] show less	Port Scan Brute-Force Web App Attack
🇨🇿 Countryman	2026-09-12 00:10:01 (1 week ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇩🇪 4server	2026-09-11 05:55:02 (1 week ago)	[FriSep1107:54:58.5814672026][security2:error][pid1367739:tid1367853][client130.49.11.114:0]ModSecur ... show more [FriSep1107:54:58.5814672026][security2:error][pid1367739:tid1367853][client130.49.11.114:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"prstartup.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqOXsrogs21Id19m78z_VQAAAIg\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Carsten	2026-08-24 21:45:29 (3 weeks ago)	Bad web bot [curl/8.14.1]	Bad Web Bot
🇩🇪 stinpriza	2026-07-28 23:33:58 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 09:59:49 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 130.49.11.114 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:59:44.819951 2026] [security2:error] [pid 3326:tid 3326] [client 130.49.11.114:59153] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tolenaar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tolenaar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al9DENLQZ4LYwsAi66OzvwAAAAo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-06-12 12:04:27 (3 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 20:23:46 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.11.114 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 16:23:39.096458 2026] [security2:error] [pid 14141:tid 14141] [client 130.49.11.114:23923] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|majersigns.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "majersigns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiHeywDiWo9H6XJ7dlG6_wAAAAc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-05-22 11:45:48 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 130.49.11.114 (TR/Türkiye/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 130.49.11.114 (TR/Türkiye/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 nationaleventpros.com	2026-05-20 05:43:12 (4 months ago)	WordPress login attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-05-18 04:39:04 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.11.114 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 00:38:57.446526 2026] [security2:error] [pid 17767:tid 17767] [client 130.49.11.114:18791] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gonzalez.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agqX4UvYZY6wEUHXt6f8NAAAAAM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-03 21:54:04 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.11.114 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 17:53:57.417170 2026] [security2:error] [pid 3573:tid 3573] [client 130.49.11.114:10955] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bkspeck.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bkspeck.com"] [uri "/wp-json/wp/v2/users"] [unique_id "affD9fKqMlLiDQ9_Up2vDwAAAA4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-02 21:18:46 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.11.114 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 17:18:42.668520 2026] [security2:error] [pid 16308:tid 16308] [client 130.49.11.114:62329] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kwijlen.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kwijlen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afZqMqYVbPcWxIQVv4OMnAAAAAY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:11ff:52::

🇳🇱 185.224.128.16

🇷🇸 185.37.26.111

🇯🇵 156.227.234.198

🇵🇱 146.59.95.254

🇺🇸 72.215.33.127

🇺🇸 192.129.140.236

🇺🇸 172.203.133.182

🇺🇸 172.104.11.34

🇷🇺 89.151.187.219

🇨🇦 54.39.0.5

🇹🇭 45.194.70.253

🇬🇧 35.203.210.155

🇳🇱 34.90.187.105

🇺🇸 18.118.111.159

🇧🇷 203.188.168.76

🇬🇧 195.206.182.201

🇧🇼 168.167.81.190

🇻🇳 123.16.143.216

🇬🇧 35.203.211.110