AbuseIPDB » 130.49.8.208
130.49.8.208
This IP was reported 7 times. Confidence of
Abuse
is 19% : ?
ISP
Fine Group Servers Solutions LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS59651
Domain Name
finegroupservers.com
Country
🇸🇪
Sweden
City
Marsta, Stockholm
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 130.49.8.208 :
This IP address has been reported a total of
7
times from
5 distinct
sources.
130.49.8.208 was first reported on
November 29th 2025 , and the most recent report was
14 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
tilellit.pro
2026-06-27 15:04:43
(14 hours ago)
Fail2Ban banned 130.49.8.208 for security violations in jail wp-armour. Log: 2026/06/27 15:04:43 [er ...
show more
Fail2Ban banned 130.49.8.208 for security violations in jail wp-armour. Log: 2026/06/27 15:04:43 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.8.208 | Target: wplogin" , client: 130.49.8.208, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
tilellit.pro
2026-06-27 06:51:16
(22 hours ago)
Fail2Ban banned 130.49.8.208 for security violations in jail wp-armour. Log: 2026/06/27 06:51:15 [er ...
show more
Fail2Ban banned 130.49.8.208 for security violations in jail wp-armour. Log: 2026/06/27 06:51:15 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 130.49.8.208 | Target: wplogin" , client: 130.49.8.208, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
2026-05-28 15:18:39
(4 weeks ago)
SQL injection, multiple attempts.
SQL Injection
🇱🇻
garmtech.com
2026-05-15 23:36:45
(1 month ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection
🇱🇻
garmtech.com
2026-05-14 04:23:00
(1 month ago)
IM360 WAF: Possible SQL injection attack MV:ASC)anD/**/6543=cASt((%27~%27
SQL Injection
🇺🇸
TPI-Abuse
2026-05-13 21:00:32
(1 month ago)
(mod_security) mod_security (id:211030) triggered by 130.49.8.208 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211030) triggered by 130.49.8.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 17:00:25.803057 2026] [security2:error] [pid 25978:tid 25978] [client 130.49.8.208:49417] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||www.genesis-castle.com|F|2"] [data "Matched Data: (%'%~%'%|%|%( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.genesis-castle.com"] [uri "/gallery/index.php"] [unique_id "agTmab8nRbVXTPUik3l1ywAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
Vano Ganzzz
2025-11-29 02:04:40
(6 months ago)
Triggered Cloudflare WAF (ratelimit) from FI.
Action taken: BLOCK
ASN: 59651 (AS-QUALITYNETWORK)
Pro ...
show more
Triggered Cloudflare WAF (ratelimit) from FI.
Action taken: BLOCK
ASN: 59651 (AS-QUALITYNETWORK)
Protocol: HTTP/2 (GET method)
Endpoint: /rU7uU1&nWG5O2
Timestamp: 2025-11-29T02:04:40Z
Ray ID: 9a5e892118beaa08
UA: Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/127.0.0.0 Mobile/15E148 Safari/604.1
show less
Bad Web Bot
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: