JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.49.114.113

130.49.114.113 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 30%: ?

30%

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.49.114.113

Whois 130.49.114.113

IP Abuse Reports for 130.49.114.113:

This IP address has been reported a total of 15 times from 9 distinct sources. 130.49.114.113 was first reported on November 26th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nationaleventpros.com	2026-06-14 22:18:23 (4 days ago)	WordPress login attempt	Brute-Force
🇫🇷 dynamix	2026-06-14 10:03:21 (5 days ago)	Multiple WAF Violations	Web App Attack
🇪🇸 librebit	2026-06-12 04:25:16 (1 week ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-06-11 23:11:56 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 130.49.114.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 130.49.114.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 19:11:51.028433 2026] [security2:error] [pid 32345:tid 32345] [client 130.49.114.113:55319] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|myuscpa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "myuscpa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aitAt0nhhAxz140M7IAK1AAAABI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-06-11 12:51:44 (1 week ago)	RDWeb scan	Web App Attack
🇪🇸 librebit	2026-06-10 06:11:50 (1 week ago)	RDWeb scan	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 03:12:41 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 130.49.114.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 130.49.114.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 23:12:37.743458 2026] [security2:error] [pid 18965:tid 18965] [client 130.49.114.113:46339] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|reyadecostarica.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "reyadecostarica.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aijWJVwK1ZdpOGEb9sjOfwAAABg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NicoID	2026-05-02 00:14:46 (1 month ago)	130.49.114.113 - - [01/May/2026:12:16:57 -0600] "GET /wp-login.php HTTP/1.1" 200 4884 "https://www.g ... show more 130.49.114.113 - - [01/May/2026:12:16:57 -0600] "GET /wp-login.php HTTP/1.1" 200 4884 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-27 15:17:41 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 130.49.114.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 130.49.114.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 11:17:35.760731 2026] [security2:error] [pid 4570:tid 4595] [client 130.49.114.113:15563] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|peimbert.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peimbert.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae9-D3KKLGihCkIRe8fXqwAAABY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-27 09:23:59 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 130.49.114.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 130.49.114.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 05:23:56.329319 2026] [security2:error] [pid 28253:tid 28253] [client 130.49.114.113:20085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|avmcyber.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "avmcyber.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae8rLH3GSsdhPyfICupPPwAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-03-21 00:55:00 (2 months ago)	IPBlock protected site ID [4055-d][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇩🇪 kjaerulff	2026-03-11 14:18:38 (3 months ago)	Failed Wordpress login using wp-login.php	Web App Attack
🇩🇪 Hazzard	2026-02-25 00:16:30 (3 months ago)	(wordpress) Failed wordpress login from 130.49.114.113 (FR/France/Manche/Montmartin-sur-Mer/-/[redac ... show more (wordpress) Failed wordpress login from 130.49.114.113 (FR/France/Manche/Montmartin-sur-Mer/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇬🇧 noise.agency	2026-02-11 04:20:41 (4 months ago)	(wordpress) Failed wordpress login from 130.49.114.113 (FR/France/-)	Brute-Force
🇺🇸 nationaleventpros.com	2025-11-26 16:38:48 (6 months ago)	WordPress login attempt	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 221.120.57.172

🇪🇨 186.68.83.105

🇸🇬 47.79.10.203

🇳🇱 45.148.10.120

🇷🇴 2.57.121.112

🇹🇼 221.120.57.125

🇩🇪 213.209.159.223

🇩🇪 213.209.159.56

🇺🇸 198.62.6.90

🇧🇷 186.204.61.54

🇨🇳 182.43.164.191

🇩🇪 172.217.33.146

🇺🇸 98.80.78.221

🇷🇴 92.118.39.62

🇷🇸 79.101.127.114

🇺🇸 54.193.150.134

🇳🇱 45.198.224.244

🇸🇬 43.173.182.131

🇸🇬 43.156.245.121

🇺🇸 4.150.201.26