JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.49.114.42

130.49.114.42 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 17%: ?

17%

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.49.114.42

Whois 130.49.114.42

IP Abuse Reports for 130.49.114.42:

This IP address has been reported a total of 9 times from 7 distinct sources. 130.49.114.42 was first reported on November 11th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-21 00:46:33 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 130.49.114.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 130.49.114.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:46:30.133322 2026] [security2:error] [pid 31240:tid 31240] [client 130.49.114.42:43759] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|talamancareserve.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "talamancareserve.com"] [uri "/contact.php"] [unique_id "atgLZoqaMaXBICQF2tjUdAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-24 11:21:32 (4 weeks ago)	[ti-01sc] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail apache-xmlrpc. Ex ... show more [ti-01sc] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail apache-xmlrpc. Example: 130.49.114.42 - - [24/Sep/2026:13:03:37 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 130.49.114.42 - - [24/Sep/2026:13:20:58 +0200] "POST /xmlrpc.php HTTP/2.0" 403 87 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" 130.49.114.42 - - [24/Sep/2026:13:21:18 +0200] "POST /xmlrpc.php HTTP/2.0" 403 87 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" ... show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman	2026-09-12 00:10:01 (1 month ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇱 SinaiCL	2026-07-22 03:42:58 (3 months ago)	SQL Injection Attack	SQL Injection
🇬🇧 consul.to	2026-04-17 11:21:38 (6 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-03-17 23:19:31 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.114.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.114.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 19:19:25.563400 2026] [security2:error] [pid 21374:tid 21374] [client 130.49.114.42:20457] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ccbank.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ccbank.net"] [uri "/wp-json/wp/v2/users"] [unique_id "abnhfUpsBkKcu--HNF8snQAAABE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 pamircil	2025-12-31 13:11:05 (9 months ago)	🍯 WinnieThePooh Honeypot : GET request to '/wp-config.original' on (http/80)💀	Hacking Brute-Force SSH
🇨🇿 lp	2025-11-25 20:51:48 (10 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.114.42 2025-11-25T20:56:47+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.114.42 2025-11-25T20:56:47+01:00 vpn Access-Reject 'Madelyn.Thompson' station: 130.49.114.42 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-11-11 14:50:09 (11 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.114.42 2025-11-11T15:41:24+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.114.42 2025-11-11T15:41:24+01:00 vpn Access-Reject 'primateship' station: 130.49.114.42 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.20

🇲🇽 189.203.163.10

🇸🇬 172.70.189.71

🇺🇸 118.26.109.7

🇩🇪 109.160.32.174

🇬🇧 104.248.174.159

🇷🇴 92.118.39.92

🇧🇬 79.124.59.78

🇹🇼 61.58.104.31

🇬🇧 45.135.142.118

🇧🇪 35.189.222.101

🇰🇷 220.126.237.110

🇧🇷 177.207.250.1

🇺🇸 172.236.96.130

🇩🇴 148.101.8.66

🇺🇸 107.174.124.177

🇺🇸 44.228.141.231

🇿🇲 41.173.43.34

🇺🇸 4.150.188.32

🇫🇷 178.20.213.75