JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.49.114.19

130.49.114.19 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 31%: ?

31%

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.49.114.19

Whois 130.49.114.19

IP Abuse Reports for 130.49.114.19:

This IP address has been reported a total of 23 times from 12 distinct sources. 130.49.114.19 was first reported on December 24th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-17 12:58:22 (13 hours ago)	(mod_security) mod_security (id:225170) triggered by 130.49.114.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.114.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 08:58:18.152594 2026] [security2:error] [pid 814382:tid 814382] [client 130.49.114.19:61933] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|darrenpeck.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "darrenpeck.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alom6q80amEs9qibMufc7gAAAAM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-16 21:18:09 (1 day ago)	Web password guessing	Brute-Force
🇺🇸 TPI-Abuse	2026-07-15 14:30:42 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 130.49.114.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.114.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 10:30:37.739542 2026] [security2:error] [pid 22780:tid 22780] [client 130.49.114.19:22641] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|m1graphics.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "m1graphics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aleZjRsEejQ8gZF6gHj2GgAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Jason Howell	2026-07-13 14:27:44 (4 days ago)	130.49.114.19 - - [13/Jul/2026:08:49:41 -0500] "GET /wp-login.php HTTP/1.1" 200 5864 "https://www.go ... show more 130.49.114.19 - - [13/Jul/2026:08:49:41 -0500] "GET /wp-login.php HTTP/1.1" 200 5864 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 130.49.114.19 - - [13/Jul/2026:08:49:41 -0500] "POST /wp-login.php HTTP/1.1" 200 5965 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 130.49.114.19 - - [13/Jul/2026:08:49:42 -0500] "GET /wp-admin/ HTTP/1.1" 302 4184 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 130.49.114.19 - - [13/Jul/2026:08:49:43 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fabstractco.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 8029 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 130.49.114.19 - - [13/Jul/2026:09:27:44 -05 ... show less	Web App Attack
🇪🇸 librebit	2026-07-12 11:26:06 (5 days ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-07-10 01:14:20 (1 week ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-07-07 01:17:36 (1 week ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-07-04 04:23:20 (1 week ago)	Brute force	Brute-Force
🇺🇸 kosada.com	2026-07-02 21:33:41 (2 weeks ago)	Web password guessing	Brute-Force
🇪🇸 librebit	2026-07-02 04:10:04 (2 weeks ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-06-19 20:58:15 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 130.49.114.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.114.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 16:58:08.520894 2026] [security2:error] [pid 13657:tid 13657] [client 130.49.114.19:42375] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thecalls.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thecalls.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWtYC3ecY7ORlFgVNxUgAAAAAo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 18:51:26 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 130.49.114.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.114.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 14:51:19.694866 2026] [security2:error] [pid 5462:tid 5462] [client 130.49.114.19:53395] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|delomel.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "delomel.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWPp21pJhLrTglUBVPIGwAAAAc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 venus.launch.bz	2026-04-14 17:11:12 (3 months ago)	(wpscan) WordPress probe detected from 130.49.114.19 (FR/France/-)	Hacking
🇺🇸 TPI-Abuse	2026-04-14 04:10:15 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.114.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.114.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 00:10:11.708451 2026] [security2:error] [pid 384161:tid 384161] [client 130.49.114.19:58631] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mbnetworking.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mbnetworking.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad2-I2rgPSe41Q9aAVbZ3gAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2026-03-21 07:00:55 (3 months ago)	Unauthorized login attempts [ wordpress-xmlrpc]	Brute-Force Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.58.1.239

🇺🇸 162.216.149.26

🇺🇸 52.206.216.57

🇺🇸 2a04:4e40:e040:0:5e0:78f7:73a1:5594

🇨🇳 182.132.41.34

🇧🇷 177.140.13.106

🇩🇪 172.111.80.83

🇧🇷 170.238.128.187

🇺🇸 147.185.132.178

🇨🇳 121.11.238.49

🇹🇭 118.193.56.171

🇨🇳 116.30.205.55

🇨🇳 106.117.111.230

🇧🇬 79.124.49.226

🇺🇸 74.7.242.16

🇺🇸 74.7.228.10

🇺🇸 20.118.209.32

🇺🇸 18.237.156.242

🇬🇧 2a06:4880:6000::8f

🇺🇸 216.25.89.127