JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.217.135.231

144.217.135.231 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 15%: ?

15%

ISP	B.V., Dataprovider
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	crawl-144-217-135-231.dataproviderbot.com
Domain Name	dataprovider.com
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.217.135.231

Whois 144.217.135.231

IP Abuse Reports for 144.217.135.231:

This IP address has been reported a total of 131 times from 36 distinct sources. 144.217.135.231 was first reported on May 13th 2021, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-14 18:55:25 (1 hour ago)	(mod_security) mod_security (id:243420) triggered by 144.217.135.231 (crawl-144-217-135-231.dataprov ... show more (mod_security) mod_security (id:243420) triggered by 144.217.135.231 (crawl-144-217-135-231.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 14:55:18.379584 2026] [security2:error] [pid 15292:tid 15292] [client 144.217.135.231:48775] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.h-vpastoralcharge.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.h-vpastoralcharge.org"] [uri "/Acer%20Customer/Desktop/website/bulletin.htm"] [unique_id "alaGFvOzSmTCFNGzSbVy9QAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 chronos	2026-07-11 06:03:31 (3 days ago)	[AUTORAVALT][[11/07/2026 - 03:03:30 -03:00 UTC] Attack from [OVH Hosting, Inc.] [144.217.135.231][cr ... show more [AUTORAVALT][[11/07/2026 - 03:03:30 -03:00 UTC] Attack from [OVH Hosting, Inc.] [144.217.135.231][crawl-144-217-135-231.dataproviderbot.com] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum softwa] ... show less	Hacking Web App Attack
🇬🇧 Oakley	2026-05-04 13:42:52 (2 months ago)	(antiscrape_rule) Web application abuse detected 144.217.135.231 (CA/Canada/crawl-144-217-135-231.da ... show more (antiscrape_rule) Web application abuse detected 144.217.135.231 (CA/Canada/crawl-144-217-135-231.dataproviderbot.com): 5 in the last 900 secs show less	Hacking
🇩🇪 Viveronese	2026-04-08 12:37:08 (3 months ago)	HTTP vulnerability scanning	Web App Attack
🇺🇸 ambor	2026-03-25 09:15:57 (3 months ago)	Attack type: wordpress_attack_attempt \| Target: /robots.txt \| UA: Mozilla/5.0 (compatible; Dataprovi ... show more Attack type: wordpress_attack_attempt \| Target: /robots.txt \| UA: Mozilla/5.0 (compatible; Dataprovider.com) \| Country: CA show less	Web App Attack Brute-Force
🇪🇸 librebit	2026-03-10 04:31:33 (4 months ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-01-21 05:49:29 (5 months ago)	(mod_security) mod_security (id:243420) triggered by 144.217.135.231 (crawl-144-217-135-231.dataprov ... show more (mod_security) mod_security (id:243420) triggered by 144.217.135.231 (crawl-144-217-135-231.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 00:49:25.959294 2026] [security2:error] [pid 1134075:tid 1134086] [client 144.217.135.231:39729] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.totalbodycare753.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.totalbodycare753.com"] [uri "/"] [unique_id "aXBo5U2XEZJpWL-pQDWaWwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-01-06 07:18:44 (6 months ago)	Brute force	Brute-Force
🇨🇭 backslash	2026-01-02 20:30:36 (6 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇬🇧 MrTumnus	2025-12-01 09:12:06 (7 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2025-11-30 01:33:04 (7 months ago)	(mod_security) mod_security (id:243420) triggered by 144.217.135.231 (crawl-144-217-135-231.dataprov ... show more (mod_security) mod_security (id:243420) triggered by 144.217.135.231 (crawl-144-217-135-231.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 20:32:57.291896 2025] [security2:error] [pid 6949:tid 6949] [client 144.217.135.231:41549] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.captainquirks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.captainquirks.com"] [uri "/contact/contact.php"] [unique_id "aSueyVG0cWzYvXoaWXbygAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 madaello	2025-11-10 20:48:14 (8 months ago)	144.217.135.231 - - [10/Nov/2025:21:48:12 +0100] "GET /llms.txt HTTP/1.1" 404 522 "-" "Mozilla/5.0 ( ... show more 144.217.135.231 - - [10/Nov/2025:21:48:12 +0100] "GET /llms.txt HTTP/1.1" 404 522 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 144.217.135.231 - - [10/Nov/2025:21:48:12 +0100] "GET /humans.txt HTTP/1.1" 404 847 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 144.217.135.231 - - [10/Nov/2025:21:48:13 +0100] "GET /ads.txt HTTP/1.1" 404 847 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 144.217.135.231 - - [10/Nov/2025:21:48:13 +0100] "GET /security.txt HTTP/1.1" 404 847 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 144.217.135.231 - - [10/Nov/2025:21:48:13 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 847 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" ... show less	Port Scan
🇩🇪 Kreapptivo	2025-10-13 06:47:04 (9 months ago)	[13/Oct/2025:08:47:02 +0200] Web-Request: "GET /.well-known/security.txt", User-Agent: "Mozilla/5.0 ... show more [13/Oct/2025:08:47:02 +0200] Web-Request: "GET /.well-known/security.txt", User-Agent: "Mozilla/5.0 (compatible; Dataprovider.com)" show less	Bad Web Bot Web App Attack
Anonymous	2025-09-16 01:23:20 (9 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2025-09-01 11:48:08 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.180

🇳🇱 185.223.235.29

🇺🇸 161.153.121.253

🇵🇰 160.187.180.146

🇺🇸 150.136.214.177

🇨🇳 120.39.36.196

🇳🇱 89.21.67.133

🇩🇪 69.5.169.95

🇫🇷 51.159.110.167

🇳🇱 195.178.110.30

🇨🇳 183.199.82.51

🇸🇪 89.253.90.113

🇳🇱 89.248.172.11

🇹🇼 61.223.67.238

🇺🇸 54.82.58.124

🇭🇰 43.155.40.91

🇺🇸 205.210.31.84

🇸🇬 172.71.124.148

🇨🇳 121.229.205.104

🇲🇾 51.162.192.62