JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.49.76.108

130.49.76.108 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 5%: ?

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇵🇱 Poland
City	Gdansk, Pomerania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.49.76.108

Whois 130.49.76.108

IP Abuse Reports for 130.49.76.108:

This IP address has been reported a total of 14 times from 5 distinct sources. 130.49.76.108 was first reported on November 13th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-15 13:22:47 (3 hours ago)	(mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 09:22:40.534890 2026] [security2:error] [pid 27776:tid 27776] [client 130.49.76.108:9337] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ftwwx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ftwwx.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aleJoKj5DU_0jHJjRNy4nAAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 12:19:46 (4 hours ago)	(mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 08:19:38.729515 2026] [security2:error] [pid 6401:tid 6401] [client 130.49.76.108:50449] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cgautomatizacion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cgautomatizacion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ald62o5vMrlHzXj7kDRDQwAAABU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-06 00:15:17 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 20:15:09.633913 2026] [security2:error] [pid 8848:tid 8848] [client 130.49.76.108:20663] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|alan-ip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alan-ip.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afqIDSos16O6PvHzp_ctEQAAAB4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-04 00:18:21 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 20:18:14.845617 2026] [security2:error] [pid 5846:tid 5846] [client 130.49.76.108:21745] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|atame.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "atame.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afflxhc3W9LGMjuxoFl4SgAAAAM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-03 09:31:13 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 05:31:08.343113 2026] [security2:error] [pid 4189:tid 4189] [client 130.49.76.108:37835] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rcjav.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rcjav.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afcV3HCgql0QLxqIfKRNlgAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-04-23 17:09:22 (2 months ago)	Web password guessing	Brute-Force
🇺🇸 nationaleventpros.com	2026-04-18 03:01:04 (2 months ago)	WordPress login attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-03-18 19:20:24 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 130.49.76.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 15:20:19.022492 2026] [security2:error] [pid 2446:tid 2446] [client 130.49.76.108:23467] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dualspiralsystems.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dualspiralsystems.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abr68wqko12aHUNAxVFwRgAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kjaerulff	2026-03-11 14:33:50 (4 months ago)	Failed Wordpress login using wp-login.php	Web App Attack
🇨🇿 lp	2025-11-27 10:26:37 (7 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.76.108 2025-11-27T11:15:40+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.76.108 2025-11-27T11:15:40+01:00 vpn Access-Reject 'administator' station: 130.49.76.108 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-11-21 19:21:53 (7 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.76.108 2025-11-21T19:31:22+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.76.108 2025-11-21T19:31:22+01:00 vpn Access-Reject 'Cooper.Taylor' station: 130.49.76.108 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-11-19 20:50:57 (7 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.76.108 2025-11-19T20:55:27+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.76.108 2025-11-19T20:55:27+01:00 vpn Access-Reject 'david.williams' station: 130.49.76.108 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-11-15 13:21:10 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.76.108 2025-11-15T13:14:05+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.76.108 2025-11-15T13:14:05+01:00 vpn Access-Reject 'henry.phillips' station: 130.49.76.108 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-11-13 10:22:53 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.76.108 2025-11-13T09:49:57+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 130.49.76.108 2025-11-13T09:49:57+01:00 vpn Access-Reject 'isaac.nguyen' station: 130.49.76.108 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.234.36.123

🇩🇪 169.58.20.19

🇧🇩 103.179.239.28

🇧🇩 103.111.225.175

🇹🇬 102.64.160.189

🇲🇽 69.67.148.187

🇺🇸 45.194.67.27

🇨🇳 2408:8207:60c5:cf40:265e:beff:fe33:1a4e

🇦🇺 202.62.129.18

🇺🇿 198.163.192.253

🇹🇷 176.227.97.28

🇮🇳 150.107.232.4

🇺🇸 142.147.248.28

🇺🇸 138.68.243.18

🇧🇩 103.177.150.146

🇫🇷 91.196.152.120

🇧🇩 58.145.190.233

🇺🇸 45.194.67.30

🇺🇸 44.193.6.38

🇪🇬 41.65.118.172