JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.56.150.186

149.56.150.186 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 21%: ?

21%

ISP	B.V., Dataprovider
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	crawl-149-56-150-186.dataproviderbot.com
Domain Name	dataprovider.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.56.150.186

Whois 149.56.150.186

IP Abuse Reports for 149.56.150.186:

This IP address has been reported a total of 99 times from 35 distinct sources. 149.56.150.186 was first reported on September 14th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-08-21 11:05:10 (2 days ago)	Brute force	Brute-Force
🇩🇪 psauxit	2026-07-28 11:56:43 (3 weeks ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Web App Attack Hacking
🇪🇸 librebit	2026-07-25 02:31:03 (4 weeks ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-07-19 21:21:05 (1 month ago)	(mod_security) mod_security (id:243420) triggered by 149.56.150.186 (crawl-149-56-150-186.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.150.186 (crawl-149-56-150-186.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 17:20:59.036559 2026] [security2:error] [pid 16598:tid 16598] [client 149.56.150.186:52671] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|musicshowcase.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "musicshowcase.us"] [uri "/bandolero.htm"] [unique_id "al0_u5A17xMlMCXTlilbygAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 conrad10781	2026-07-16 18:38:58 (1 month ago)	nginx-4xx	Web App Attack
🇪🇸 librebit	2026-06-23 18:09:30 (2 months ago)	Brute force	Brute-Force
🇫🇮 6kilowatti	2026-06-06 18:35:31 (2 months ago)	149.56.150.186 - - [06/Jun/2026:21:35:31 +0300] "GET /security.txt HTTP/1.1" 404 41 "-" "Mozilla/5.0 ... show more 149.56.150.186 - - [06/Jun/2026:21:35:31 +0300] "GET /security.txt HTTP/1.1" 404 41 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" ... show less	Web App Attack
🇺🇸 webgobe	2026-04-23 17:00:26 (4 months ago)	caw-Joomla User : try to access forms...	Hacking
Anonymous	2026-04-13 12:42:37 (4 months ago)	Attempt to access forbidden file or directory.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 02:09:31 (4 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.150.186 (crawl-149-56-150-186.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.150.186 (crawl-149-56-150-186.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 22:09:27.481963 2026] [security2:error] [pid 16646:tid 16646] [client 149.56.150.186:43017] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|ptfea.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ptfea.org"] [uri "/index.html"] [unique_id "acx-Vya36eWDx3N2qE86iAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-02-22 05:05:33 (6 months ago)	Brute force	Brute-Force
Anonymous	2026-01-30 06:15:28 (6 months ago)		Web App Attack
🇩🇪 HERA - Operations	2025-12-04 16:25:02 (8 months ago)	sensobox - searching for vulnerable scripts: security.txt 2025/12/04 17:25:01	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:41:47 (8 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.150.186 (crawl-149-56-150-186.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.150.186 (crawl-149-56-150-186.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:41:43.385999 2025] [security2:error] [pid 29629:tid 29629] [client 149.56.150.186:50449] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.oceanrich.biz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.oceanrich.biz"] [uri "/index.htm"] [unique_id "aSVBl3YhFfH5TZGZ-EPFEgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 S.O.B.A. Dev.	2025-10-12 03:42:53 (10 months ago)	Threat Blocked by BeeHive from (ASN:16276) (Network:OVH) (Host:soba.dev) (Method:GET) (Protocol:HTTP ... show more Threat Blocked by BeeHive from (ASN:16276) (Network:OVH) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-10-12T03:42:53Z) show less	Web Spam Brute-Force Web App Attack

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.191.34.239

🇱🇹 213.176.26.54

🇺🇸 172.68.174.182

🇺🇸 172.68.174.81

🇸🇬 101.47.159.125

🇷🇴 92.118.39.71

🇺🇸 64.62.156.13

🇬🇧 62.60.130.253

🇬🇧 54.38.147.248

🇳🇱 45.148.10.152

🇯🇵 20.63.219.114

🇬🇧 2a06:4880:2000::33

🇺🇸 2001:470:2cc:1::20d

🇳🇱 217.104.71.241

🇱🇹 213.176.26.44

🇬🇧 193.32.209.239

🇬🇧 188.240.59.31

🇨🇳 120.48.22.91

🇬🇭 102.69.222.27

🇬🇧 81.19.219.221