JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.130.22.119

94.130.22.119 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 31%: ?

31%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.119.22.130.94.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.130.22.119

Whois 94.130.22.119

IP Abuse Reports for 94.130.22.119:

This IP address has been reported a total of 17 times from 11 distinct sources. 94.130.22.119 was first reported on April 11th 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-13 07:15:01 (7 hours ago)	(mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.you ... show more (mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:14:53.536040 2026] [security2:error] [pid 12565:tid 12624] [client 94.130.22.119:33602] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.scottspencergfx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.scottspencergfx.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai0DbYognBwoFTR1j0ucSAAAAdM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 05:47:33 (9 hours ago)	(mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.you ... show more (mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:47:28.635146 2026] [security2:error] [pid 22173:tid 22173] [client 94.130.22.119:35888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|joevallone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "joevallone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aizu8LOX-waO9kVSDKozqAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 23:58:30 (14 hours ago)	(mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.you ... show more (mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 19:58:23.603444 2026] [security2:error] [pid 7659:tid 7659] [client 94.130.22.119:36462] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.sizefinder.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.sizefinder.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiydH6mPN3SdeRj0P1OyAwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-12 22:56:35 (15 hours ago)	[redacted] 94.130.22.119 - - [13/Jun/2026:00:56:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "M ... show more [redacted] 94.130.22.119 - - [13/Jun/2026:00:56:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0" [redacted] 94.130.22.119 - - [13/Jun/2026:00:56:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" [redacted] 94.130.22.119 - - [13/Jun/2026:00:56:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0" [redacted] 94.130.22.119 - - [13/Jun/2026:00:56:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" [redacted] 94.130.22.119 - - [13/Jun/2026:00:56:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0" [redacted] 94.130.22.119 - - [13/J ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 14:56:50 (23 hours ago)	(mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.you ... show more (mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:56:45.270730 2026] [security2:error] [pid 16510:tid 16510] [client 94.130.22.119:59466] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|brbcash.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brbcash.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiweLf-W1jIZtCbXE1I2FgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-06-12 11:36:23 (1 day ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇺🇸 TPI-Abuse	2026-06-12 09:40:43 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.you ... show more (mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 05:40:37.418577 2026] [security2:error] [pid 13972:tid 13995] [client 94.130.22.119:37236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.greaternorthmiamihistory.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greaternorthmiamihistory.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aivUFRn-oVU3nPWe012d9QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-12 06:24:51 (1 day ago)	[server.tmg.gr] httpd-suspicious-path: sites=exarjournal.com; logs=/var/log/httpd/domains/exarjourna ... show more [server.tmg.gr] httpd-suspicious-path: sites=exarjournal.com; logs=/var/log/httpd/domains/exarjournal.com.log; samples=/author/admin/ \| /?author=2 \| /wp-json/wp/v2/users show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 02:42:37 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.you ... show more (mod_security) mod_security (id:225170) triggered by 94.130.22.119 (static.119.22.130.94.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 22:42:29.783232 2026] [security2:error] [pid 8871:tid 8871] [client 94.130.22.119:59358] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.allotrope.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.allotrope.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aityFUVTmsDLbSblunWsiQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Smel	2024-10-02 06:49:22 (1 year ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
Anonymous	2024-08-13 06:12:46 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇪🇸 10dencehispahard SL	2024-07-21 20:05:20 (1 year ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇺🇸 hostseries	2024-07-01 15:48:07 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
🇲🇾 Rizzy	2024-06-21 11:04:24 (1 year ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇨🇭 unifr	2024-04-18 00:03:04 (2 years ago)	Unauthorized IMAP connection attempt	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.45

🇺🇸 162.216.149.246

🇺🇸 103.221.235.177

🇷🇴 80.94.92.186

🇦🇱 77.242.17.68

🇱🇹 45.227.254.170

🇮🇪 3.249.109.108

🇨🇦 3.99.217.12

🇩🇪 195.20.239.136

🇺🇸 172.253.251.52

🇷🇸 109.206.102.75

🇳🇱 94.102.51.9

🇳🇱 81.19.216.90

🇺🇸 66.132.195.47

🇸🇬 47.128.122.109

🇺🇸 45.249.59.246

🇬🇧 35.203.210.223

🇻🇳 222.252.30.199

🇵🇱 212.127.90.201

🇵🇾 201.217.12.57