🇹🇷
neron
2026-08-15 21:06:48
(1 week ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇮🇹
Progetto1
2026-08-04 15:25:02
(3 weeks ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇨🇭
myguns.ch
2026-07-28 10:33:00
(4 weeks ago)
Searching for vulnerable scripts: /.well-known/security.txt
Hacking
Web App Attack
🇺🇸
lavnet.net
2026-07-24 17:18:02
(1 month ago)
149.56.150.153 - - [24/Jul/2026:17:18:01 +0000] "GET /sitemap.xml HTTP/1.1" 404 2083 "-" "Mozilla/5. ...
show more
149.56.150.153 - - [24/Jul/2026:17:18:01 +0000] "GET /sitemap.xml HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.153 - - [24/Jul/2026:17:18:02 +0000] "GET /ads.txt HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.153 - - [24/Jul/2026:17:18:02 +0000] "GET /security.txt HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.153 - - [24/Jul/2026:17:18:02 +0000] "GET /.well-known/security.txt HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.153 - - [24/Jul/2026:17:18:02 +0000] "GET /llms.txt HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.153 - - [24/Jul/2026:17:18:02 +0000] "GET /humans.txt HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
...
show less
Brute-Force
🇨🇭
Origon
2026-07-02 15:17:26
(1 month ago)
http-probing - IP: 149.56.150.153 - time="2026-07-02T17:17:25+02:00" level=info msg="(555f66b4f6a74 ...
show more
http-probing - IP: 149.56.150.153 - time="2026-07-02T17:17:25+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 149.56.150.153 (CA/16276) : 4h ban on Ip 149.56.150.153" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 21:05:36
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 149.56.150.153 (crawl-149-56-150-153.dataprovid ...
show more
(mod_security) mod_security (id:210730) triggered by 149.56.150.153 (crawl-149-56-150-153.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 17:05:32.519009 2026] [security2:error] [pid 14415:tid 14415] [client 149.56.150.153:34963] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.69strains.com|F|2"] [data ".cannapages.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.69strains.com"] [uri "/www.cannapages.com"] [unique_id "ahNoHL3hGWtiNS44_n8KvgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-24 05:27:31
(3 months ago)
(apache-useragents) Failed apache-useragents trigger with match [Mozilla/5.0 (compatible; Dataprovid ...
show more
(apache-useragents) Failed apache-useragents trigger with match [Mozilla/5.0 (compatible; Dataprovider.com)] from 149.56.150.153 (NL/The Netherlands/crawl-149-56-150-153.dataproviderbot.com): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 149.56.150.153 - - [24/May/2026:07:27:14 +0200] "GET / HTTP/1.1" 301 527 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.153 - - [24/May/2026:07:27:14 +0200] "GET / HTTP/2.0" 200 154196 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.153 - - [24/May/2026:07:27:18 +0200] "GET /robots.txt HTTP/2.0" 200 615 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.153 - - [24/May/2026:07:27:20 +0200] "GET /sitemap_index.xml HTTP/2.0" 200 1263 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.153 - - [24/May/2026:07:27:22 +0200] "GET / HTTP/1.1" 200 158847 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
show less
Port Scan
🇩🇪
www.Examensfragen.de
2026-05-18 10:33:32
(3 months ago)
Web Spam
Bad Web Bot
🇫🇷
conseilgouz
2026-05-07 17:23:26
(3 months ago)
loe-88 : Bloc AI bots=>/(Dataprovider)
Hacking
🇫🇷
conseilgouz
2026-04-03 23:10:50
(4 months ago)
sie-88 : Bloc AI bots=>/(Dataprovider)
Hacking
🇺🇸
ambor
2026-02-23 02:18:01
(6 months ago)
Attack type: wordpress_attack_attempt | Target: /robots.txt | UA: Mozilla/5.0 (compatible; Dataprovi ...
show more
Attack type: wordpress_attack_attempt | Target: /robots.txt | UA: Mozilla/5.0 (compatible; Dataprovider.com) | Country: CA
show less
Web App Attack
Brute-Force
🇪🇸
librebit
2026-02-04 15:49:32
(6 months ago)
Brute force
Brute-Force
2026-01-02 21:59:52
(7 months ago)
client denied by server configuration
Port Scan
Hacking
Bad Web Bot
🇨🇭
myguns.ch
2025-12-24 14:20:50
(8 months ago)
Searching for vulnerable scripts: /.well-known/security.txt
Hacking
Web App Attack
2025-12-23 08:34:44
(8 months ago)
PSCDE WEBFORM SPAM 149.56.150.153 (crawl-149-56-150-153.dataproviderbot.com)
Web Spam