JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.56.150.238

149.56.150.238 was found in our database!

This IP was reported 106 times. Confidence of Abuse is 14%: ?

14%

ISP	B.V., Dataprovider
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	crawl-149-56-150-238.dataproviderbot.com
Domain Name	dataprovider.com
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.56.150.238

Whois 149.56.150.238

IP Abuse Reports for 149.56.150.238:

This IP address has been reported a total of 106 times from 39 distinct sources. 149.56.150.238 was first reported on August 23rd 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-06 04:18:57 (2 weeks ago)	Brute force	Brute-Force
🇸🇪 teskedsgumman.se	2026-06-22 07:03:00 (1 month ago)	content stealer	Bad Web Bot Hacking
🇪🇸 librebit	2026-06-16 06:33:16 (1 month ago)	Brute force	Brute-Force
🇺🇸 SodaAudit.app	2026-06-01 14:47:08 (1 month ago)	[sodaaudit.app] Web app attack. Timestamp: 2026-06-01T09:30:44.000Z. 4 probe events, 4 distinct path ... show more [sodaaudit.app] Web app attack. Timestamp: 2026-06-01T09:30:44.000Z. 4 probe events, 4 distinct path(s). Paths (payload): /uploads/old, /temp/backup, /api/v0/test, /trap-bot show less	Web App Attack
🇩🇪 Skyrider	2026-05-21 16:10:06 (2 months ago)	149.56.150.238 - - [21/May/2026:18:10:04 +0200] "GET /ads.txt HTTP/2.0" 404 113 "-" "Mozilla/5.0 (co ... show more 149.56.150.238 - - [21/May/2026:18:10:04 +0200] "GET /ads.txt HTTP/2.0" 404 113 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.238 - - [21/May/2026:18:10:04 +0200] "GET /llms.txt HTTP/2.0" 404 113 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.238 - - [21/May/2026:18:10:04 +0200] "GET /security.txt HTTP/2.0" 404 113 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.238 - - [21/May/2026:18:10:05 +0200] "GET /.well-known/security.txt HTTP/2.0" 404 113 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.238 - - [21/May/2026:18:10:05 +0200] "GET /humans.txt HTTP/2.0" 404 113 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" show less	Bad Web Bot Web App Attack
🇩🇪 YF	2026-05-13 11:10:14 (2 months ago)	WordPress directory enumeration	Web App Attack
🇺🇸 chronos	2026-05-12 03:18:28 (2 months ago)	[AUTORAVALT][[12/05/2026 - 00:18:28 -03:00 UTC] Attack from [OVH Hosting, Inc.] [149.56.150.238][cra ... show more [AUTORAVALT][[12/05/2026 - 00:18:28 -03:00 UTC] Attack from [OVH Hosting, Inc.] [149.56.150.238][crawl-149-56-150-238.dataproviderbot.com] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software] ... show less	Hacking Web App Attack
🇵🇱 sefinek.net	2026-05-10 08:08:11 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Linux; Android 10; SM-G981B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.162 Mobile Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 librebit	2026-04-05 10:49:49 (3 months ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-03-23 08:35:41 (4 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.150.238 (crawl-149-56-150-238.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.150.238 (crawl-149-56-150-238.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 04:35:36.528392 2026] [security2:error] [pid 450:tid 450] [client 149.56.150.238:55225] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6649"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.garagemensministry.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.garagemensministry.org"] [uri "/index.html"] [unique_id "acD7WIy2LdbcnT6IuDHgnQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 sverson	2026-03-13 13:55:31 (4 months ago)	Abusive use detected / Mutliple unauthorized attempts to access web resources	Hacking Web App Attack
Anonymous	2026-03-08 17:37:03 (4 months ago)	[Sun Mar 08 18:37:00.071554 2026] [access_compat:error] [pid 1893642:tid 1893642] [client 149.56.150 ... show more [Sun Mar 08 18:37:00.071554 2026] [access_compat:error] [pid 1893642:tid 1893642] [client 149.56.150.238:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/ads.txt [Sun Mar 08 18:37:00.449363 2026] [access_compat:error] [pid 1891362:tid 1891362] [client 149.56.150.238:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/security.txt [Sun Mar 08 18:37:00.595932 2026] [access_compat:error] [pid 1893642:tid 1893642] [client 149.56.150.238:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.well-known/security.txt [Sun Mar 08 18:37:00.739598 2026] [access_compat:error] [pid 1893642:tid 1893642] [client 149.56.150.238:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/llms.txt [Sun Mar 08 18:37:00.883928 2026] [access_compat:error] [pid 1893642:tid 1893642] [client 149.56.150.238:0] AH01797: client denied by server configuration: /var/www/wordpres ... show less	Web Spam Web App Attack
🇬🇧 gurnip	2025-12-13 18:16:43 (7 months ago)	Vulnerability probe of page /.well-known/security.txt, not found on server.	Brute-Force Web App Attack
🇺🇸 bazter.pro	2025-12-12 14:31:30 (7 months ago)	Auto-Ban [2025-12-08T03:48:18.309200]: Suspicious Datacenter (B.V., Dataprovider); DC: B.V., Datapro ... show more Auto-Ban [2025-12-08T03:48:18.309200]: Suspicious Datacenter (B.V., Dataprovider); DC: B.V., Dataprovider [Paths: 12] show less	Web App Attack
🇺🇸 bazter.pro	2025-12-08 01:48:18 (7 months ago)	Suspicious Datacenter (B.V., Dataprovider); DC: B.V., Dataprovider [Paths: 12]	Web App Attack

Showing 1 to 15 of 106 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.155

🇲🇺 197.225.146.23

🇲🇽 187.218.57.50

🇮🇳 182.70.255.242

🇺🇸 162.217.100.36

🇧🇩 119.148.49.82

🇰🇪 102.210.149.236

🇬🇧 78.153.140.251

🇺🇸 76.8.148.113

🇺🇸 3.135.249.77

🇺🇸 3.83.245.221

🇧🇪 207.175.129.154

🇬🇧 193.163.125.66

🇳🇱 185.223.235.29

🇵🇰 103.166.103.173

🇷🇴 80.94.92.179

🇮🇪 54.247.33.116

🇧🇷 45.205.1.246

🇧🇷 45.205.1.244

🇬🇧 2a06:4880:4000::62