JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.56.150.168

149.56.150.168 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 16%: ?

16%

ISP	B.V., Dataprovider
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	crawl-149-56-150-168.dataproviderbot.com
Domain Name	dataprovider.com
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.56.150.168

Whois 149.56.150.168

IP Abuse Reports for 149.56.150.168:

This IP address has been reported a total of 110 times from 32 distinct sources. 149.56.150.168 was first reported on August 25th 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 thilo	2026-05-26 13:06:19 (3 weeks ago)	Probe for vulnerabilities. Path attempted: /security	Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 23:30:35 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 149.56.150.168 (crawl-149-56-150-168.dataprovid ... show more (mod_security) mod_security (id:210730) triggered by 149.56.150.168 (crawl-149-56-150-168.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 19:30:28.428685 2026] [security2:error] [pid 24027:tid 24046] [client 149.56.150.168:43273] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|condo.management\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "condo.management"] [uri "/contact/enlan.com"] [unique_id "ageslNakq1F-oW2MnLqJBwAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-05-05 18:02:08 (1 month ago)	WordPress directory enumeration	Web App Attack
🇺🇸 Alvino	2026-05-01 18:11:23 (1 month ago)	Blocked due to using a VPN or data center IP with abuse: 8	Web Spam VPN IP
🇪🇸 librebit	2026-03-29 04:21:17 (2 months ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-03-26 21:02:31 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 149.56.150.168 (crawl-149-56-150-168.dataprovid ... show more (mod_security) mod_security (id:210730) triggered by 149.56.150.168 (crawl-149-56-150-168.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 17:02:28.645122 2026] [security2:error] [pid 9862:tid 9862] [client 149.56.150.168:40463] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.69strains.com\|F\|2"] [data ".cannapages.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.69strains.com"] [uri "/www.cannapages.com"] [unique_id "acWe5GhqerKwJWi9HUsIRQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-18 18:34:57 (2 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.150.168 (crawl-149-56-150-168.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.150.168 (crawl-149-56-150-168.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 14:34:53.475419 2026] [security2:error] [pid 31535:tid 31535] [client 149.56.150.168:48747] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.disenowebprofesional.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.disenowebprofesional.com"] [uri "/contacto/"] [unique_id "abrwTdB1MFLLWdR_vVVmOgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-12 13:19:43 (5 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
Anonymous	2025-10-30 07:33:52 (7 months ago)	Excessive crawling/scraping	Hacking Brute-Force
Anonymous	2025-10-20 04:00:29 (7 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2025-10-03 17:26:06 (8 months ago)	lae-88 : Bloc AI bots=>/(Dataprovider)	Hacking
🇹🇷 rtbh.com.tr	2025-09-26 20:09:01 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-26 00:08:59 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-25 20:09:00 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 SpaceHost-Server	2025-09-24 22:26:28 (8 months ago)		Brute-Force Web App Attack

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.96.139.12

🇬🇧 2a0b:4140:d866::2

🇫🇷 2a02:c207:2005:697::1

🇳🇱 2a01:e5c0:42c9::2

🇨🇳 218.92.251.198

🇬🇧 194.164.92.8

🇬🇧 193.163.125.142

🇬🇧 185.247.137.7

🇳🇱 185.242.226.126

🇸🇬 167.172.93.203

🇭🇰 141.11.91.133

🇨🇳 123.138.18.10

🇮🇩 103.186.31.66

🇭🇰 85.121.51.5

🇵🇱 83.6.75.98

🇨🇳 59.175.212.114

🇺🇦 46.149.191.249

🇧🇷 45.205.1.243

🇬🇧 45.91.93.243

🇺🇸 38.34.175.146