🇺🇸
TPI-Abuse
2026-11-06 06:05:47
UTC ·
(15 hours ago)
(mod_security) mod_security (id:243420) triggered by 149.56.150.23 (crawl-149-56-150-23.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:05:40.536380 2026] [security2:error] [pid 17021:tid ...
show more
(mod_security) mod_security (id:243420) triggered by 149.56.150.23 (crawl-149-56-150-23.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:05:40.536380 2026] [security2:error] [pid 17021:tid 17021] [client 149.56.150.23:33059] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.artocratic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.artocratic.com"] [uri "/home/contact.html"] [unique_id "au1uNDy3ywBrqQJgb-Qz9wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-03 17:31:42
UTC ·
(3 days ago)
Abusive crawler | ua: Mozilla/5.0 (compatible; Dataprovider.com) | path: / | 2026-11-03 17:31 UTC
Bad Web Bot
🇩🇪
LRob
2026-11-03 11:15:50
UTC ·
(3 days ago)
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (compatible; Dataprovider.com) | 2026-11-03 11:15 UTC
Bad Web Bot
🇬🇧
Mendip_Defender
2026-11-03 00:48:53
UTC ·
(3 days ago)
149.56.150.23 - - [03/Nov/2026:00:48:51 +0000] "GET /llms.txt HTTP/1.1" 404 6499 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.23 - - [03/Nov/2026:00:48:51 +0000] "GET /ads.txt HTTP/1.1" 404 6499 "-" "Mozilla/5.0 (compatible; Dataprovid ...
show more
149.56.150.23 - - [03/Nov/2026:00:48:51 +0000] "GET /llms.txt HTTP/1.1" 404 6499 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.23 - - [03/Nov/2026:00:48:51 +0000] "GET /ads.txt HTTP/1.1" 404 6499 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.23 - - [03/Nov/2026:00:48:51 +0000] "GET /humans.txt HTTP/1.1" 404 6499 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
...
show less
Hacking
Web App Attack
🇿🇦
vanderhost
2026-10-26 06:12:23
UTC ·
(1 week ago)
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/2019/03/vander-host-icon.png via rule: /wp-content
Web App Attack
Bad Web Bot
🇬🇧
blik2108
2026-10-03 07:46:08
UTC ·
(1 month ago)
www.blacknell.co.uk:443 149.56.150.23 - - [03/Oct/2026:08:46:04 +0100] "GET /.well-known/ucp HTTP/1.1" 404 8822 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
www.blacknell.co.uk:443 149.56.150.23 - - [03/Oct/2026:08:46:04 +0100] "GET /llms.txt HTT ...
show more
www.blacknell.co.uk:443 149.56.150.23 - - [03/Oct/2026:08:46:04 +0100] "GET /.well-known/ucp HTTP/1.1" 404 8822 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
www.blacknell.co.uk:443 149.56.150.23 - - [03/Oct/2026:08:46:04 +0100] "GET /llms.txt HTTP/1.1" 404 9180 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
www.blacknell.co.uk:443 149.56.150.23 - - [03/Oct/2026:08:46:04 +0100] "GET /security.txt HTTP/1.1" 404 9180 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
www.blacknell.co.uk:443 149.56.150.23 - - [03/Oct/2026:08:46:05 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 9180 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
www.blacknell.co.uk:443 149.56.150.23 - - [03/Oct/2026:08:46:05 +0100] "GET /humans.txt HTTP/1.1" 404 9180 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
...
show less
Brute-Force
🇩🇪
LRob
2026-10-03 04:08:21
UTC ·
(1 month ago)
Abusive crawler | ua: Mozilla/5.0 (compatible; Dataprovider.com) | path: / | 2026-10-03 04:08 UTC
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-21 17:42:32
UTC ·
(1 month ago)
(mod_security) mod_security (id:243420) triggered by 149.56.150.23 (crawl-149-56-150-23.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 13:42:27.780777 2026] [security2:error] [pid 5817:tid ...
show more
(mod_security) mod_security (id:243420) triggered by 149.56.150.23 (crawl-149-56-150-23.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 13:42:27.780777 2026] [security2:error] [pid 5817:tid 5817] [client 149.56.150.23:51485] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.ospreylake.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.ospreylake.org"] [uri "/AppData/Local/Temp/osprey_milfoil.htm"] [unique_id "arFsg5vsMm22OvTuknH2wAAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2026-09-20 16:25:02
UTC ·
(1 month ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
LRob
2026-09-19 01:30:07
UTC ·
(1 month ago)
Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5.0 (compatible; Dataprovider.com) | path: / (+2 more) | 2026-09-19 01:30 UTC
Bad Web Bot
🇳🇴
Abuse Buster
2026-09-04 23:15:47
UTC ·
(2 months ago)
149.56.150.23 - [05/Sep/2026:01:15:45 +0200] "GET /llms.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.23 - [05/Sep/2026:01:15:45 +0200] "GET /security.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Dataprovide ...
show more
149.56.150.23 - [05/Sep/2026:01:15:45 +0200] "GET /llms.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.23 - [05/Sep/2026:01:15:45 +0200] "GET /security.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.23 - [05/Sep/2026:01:15:46 +0200] "GET /humans.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
...
show less
Web App Attack
🇵🇱
Budyn
2026-09-04 15:19:32
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: www.dont-eat-the-pudding.top | URI: /wp-admin/ | UA: Mozilla/ ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: www.dont-eat-the-pudding.top | URI: /wp-admin/ | UA: Mozilla/5.0 (compatible; Dataprovider.com) | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-20 01:09:01
UTC ·
(2 months ago)
(mod_security) mod_security (id:243420) triggered by 149.56.150.23 (crawl-149-56-150-23.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 21:08:56.042068 2026] [security2:error] [pid 15520:tid ...
show more
(mod_security) mod_security (id:243420) triggered by 149.56.150.23 (crawl-149-56-150-23.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 21:08:56.042068 2026] [security2:error] [pid 15520:tid 15520] [client 149.56.150.23:37531] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||musicshowcase.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "musicshowcase.us"] [uri "/bandolero.htm"] [unique_id "aoZTqNHTeYaBBAFlRvNmkwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
Abuse Buster
2026-08-05 04:29:28
UTC ·
(3 months ago)
149.56.150.23 - [05/Aug/2026:06:29:26 +0200] "GET /ads.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.23 - [05/Aug/2026:06:29:26 +0200] "GET /llms.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Dataprovider.com ...
show more
149.56.150.23 - [05/Aug/2026:06:29:26 +0200] "GET /ads.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.23 - [05/Aug/2026:06:29:26 +0200] "GET /llms.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
149.56.150.23 - [05/Aug/2026:06:29:27 +0200] "GET /security.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
...
show less
Web App Attack
🇨🇦
lakered
2026-07-27 06:03:31
UTC ·
(3 months ago)
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
