JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.49.79.51

130.49.79.51 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 28%: ?

28%

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.49.79.51

Whois 130.49.79.51

IP Abuse Reports for 130.49.79.51:

This IP address has been reported a total of 23 times from 14 distinct sources. 130.49.79.51 was first reported on February 22nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 zXero	2026-09-01 13:06:00 (1 hour ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 TPI-Abuse	2026-08-31 20:20:37 (18 hours ago)	(mod_security) mod_security (id:225170) triggered by 130.49.79.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 130.49.79.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 16:20:32.864365 2026] [security2:error] [pid 3817:tid 3817] [client 130.49.79.51:19437] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|midnightscribe.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "midnightscribe.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apXiELJ24CR6KS69gNk3zgAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 zXero	2026-08-29 02:59:31 (3 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-08-27 12:30:35 (5 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 kosada.com	2026-08-24 07:21:07 (1 week ago)	Web password guessing	Brute-Force
🇨🇦 zXero	2026-08-16 17:04:08 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 kosada.com	2026-08-07 01:05:59 (3 weeks ago)	Web password guessing	Brute-Force
🇵🇱 tomkolp	2026-08-06 01:00:03 (3 weeks ago)	CSF/LFD block: WPLOGIN - WP Login Attack 130.49.79.51 (-): 5 in the last 3600 secs	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 23:30:00 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 130.49.79.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 130.49.79.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 19:29:56.921997 2026] [security2:error] [pid 716409:tid 716409] [client 130.49.79.51:15897] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wizind.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wizind.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amVG9GGWST66wtvJ0uc36AAAAAk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 18:11:24 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 130.49.79.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 130.49.79.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 14:11:16.829484 2026] [security2:error] [pid 1470804:tid 1470804] [client 130.49.79.51:44851] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|friends-ytc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "friends-ytc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amT8RLfW81OPNzdgjpd3DQAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO	2026-06-29 09:33:25 (2 months ago)	Fail2Ban banned 130.49.79.51 for security violations in jail wp-armour. Log: 2026/06/29 09:33:24 [er ... show more Fail2Ban banned 130.49.79.51 for security violations in jail wp-armour. Log: 2026/06/29 09:33:24 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.79.51 \| Target: wplogin" , client: 130.49.79.51, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 Tilellit.PRO	2026-06-27 05:46:38 (2 months ago)	Fail2Ban banned 130.49.79.51 for security violations in jail wp-armour. Log: 2026/06/27 05:46:38 [er ... show more Fail2Ban banned 130.49.79.51 for security violations in jail wp-armour. Log: 2026/06/27 05:46:38 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.79.51 \| Target: wplogin" , client: 130.49.79.51, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇲🇹 Malta	2026-06-26 22:48:23 (2 months ago)	130.49.79.51 - - [27/Jun/2026:00:48:23 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" "Mozilla/5.0 (X11; ... show more 130.49.79.51 - - [27/Jun/2026:00:48:23 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Hacking Web App Attack VPN IP
🇺🇸 TPI-Abuse	2026-06-21 03:45:30 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 130.49.79.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 130.49.79.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 23:45:24.403583 2026] [security2:error] [pid 6331:tid 6331] [client 130.49.79.51:31971] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cjmconsulting.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cjmconsulting.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajdeVPkG8uCxSVP5oO3j1QAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ambor	2026-05-11 05:09:31 (3 months ago)	Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 show less	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇺🇸 167.172.119.80

🇺🇸 164.92.89.41

🇬🇧 139.59.161.137

🇨🇦 96.53.66.91

🇳🇱 86.54.31.38

🇨🇭 84.74.163.210

🇶🇦 80.76.160.38

🇩🇪 43.228.157.8

🇬🇧 2.57.17.95

🇺🇸 192.185.2.195

🇺🇸 165.154.173.120

🇻🇳 103.28.38.178

🇮🇳 66.116.205.1

🇫🇮 37.27.245.197

🇷🇺 2.61.158.100

🇰🇷 218.233.182.39

🇳🇱 85.137.56.197

🇳🇱 45.148.10.152

🇮🇩 210.79.142.201