JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.56.150.36

149.56.150.36 was found in our database!

This IP was reported 82 times. Confidence of Abuse is 7%: ?

ISP	B.V., Dataprovider
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	crawl-149-56-150-36.dataproviderbot.com
Domain Name	dataprovider.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.56.150.36

Whois 149.56.150.36

IP Abuse Reports for 149.56.150.36:

This IP address has been reported a total of 82 times from 28 distinct sources. 149.56.150.36 was first reported on March 24th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 JCG	2026-04-20 08:06:00 (1 month ago)	user agent spoofing	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-16 12:21:02 (1 month ago)	(mod_security) mod_security (id:243420) triggered by 149.56.150.36 (crawl-149-56-150-36.dataprovider ... show more (mod_security) mod_security (id:243420) triggered by 149.56.150.36 (crawl-149-56-150-36.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 08:20:59.135700 2026] [security2:error] [pid 3977452:tid 3977452] [client 149.56.150.36:58853] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6649"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.wisconsinstatehuntingexpo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.wisconsinstatehuntingexpo.com"] [uri "/contact.html"] [unique_id "aeDUK09VujWHJdiACD8E9wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇰 SaltySoftworks	2026-02-05 20:33:34 (4 months ago)	User agent spoofing	Spoofing
Anonymous	2026-02-01 22:21:45 (4 months ago)		Web App Attack
🇬🇧 Globe2	2025-10-04 08:54:34 (8 months ago)	[04/Oct/2025:09:54:28 +0100] Tb5JlnB5wbpUSMTEvlvOArPF 149.56.150.36 23992 91.212.212.13 443 [04/Oct/ ... show more [04/Oct/2025:09:54:28 +0100] Tb5JlnB5wbpUSMTEvlvOArPF 149.56.150.36 23992 91.212.212.13 443 [04/Oct/2025:09:54:28 +0100] Tb5JlnB5wbpUSMTEvlvOArPF 149.56.150.36 23992 91.212.212.13 443 [04/Oct/2025:09:54:32 +0100] 4Q-RbYeCwH8aROcOzGg1ZpNX 149.56.150.36 23992 91.212.212.13 443 ... show less	Web App Attack
🇫🇷 tr1n	2025-09-22 01:04:12 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /_next/static/chunks/main-app-1eda2b9122ec5170.js UA: Mozilla/5.0 (compatible; Dataprovider.com) show less	Bad Web Bot
🇫🇷 IRISIO	2025-09-11 07:01:17 (9 months ago)	scans/SQL injection/spam posts : 1 queries	SQL Injection Web App Attack
🇳🇱 exxos	2025-09-02 12:03:01 (9 months ago)	web exploit attacks	Web App Attack
🇩🇪 HERA - Operations	2025-08-26 03:46:54 (9 months ago)	club-herrmann - searching for vulnerable scripts: security.txt 2025/08/26 05:46:54	Web App Attack
🇨🇭 backslash	2025-08-10 05:43:27 (10 months ago)		Bad Web Bot
🇺🇸 TPI-Abuse	2025-07-17 11:19:51 (10 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.150.36 (crawl-149-56-150-36.dataprovider ... show more (mod_security) mod_security (id:243420) triggered by 149.56.150.36 (crawl-149-56-150-36.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 07:19:46.224424 2025] [security2:error] [pid 485:tid 508] [client 149.56.150.36:58267] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.sportsoutreachnc.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.sportsoutreachnc.org"] [uri "/contact.html"] [unique_id "aHjcUt7-PdM9B3zrQBX5BwAAANQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 ipv4.fr	2025-06-25 02:06:48 (11 months ago)	149.56.150.36 - - [25/Jun/2025:02:06:47 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; ... show more 149.56.150.36 - - [25/Jun/2025:02:06:47 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" ... show less	Brute-Force Web App Attack
Anonymous	2025-06-17 20:39:59 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-06-07 20:58:23 (1 year ago)	Excessive crawling/scraping	Hacking Brute-Force
🇫🇷 conseilgouz	2025-06-02 01:44:54 (1 year ago)	sae-88 : Bloc AI bots=>/	Hacking

Showing 1 to 15 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.67.157.9

🇩🇪 135.125.245.121

🇺🇸 129.153.0.48

🇨🇳 124.236.72.37

🇮🇩 103.185.53.93

🇱🇹 91.224.92.190

🇨🇦 85.217.149.26

🇩🇪 64.89.163.85

🇺🇸 47.251.169.81

🇺🇸 20.163.34.47

🇺🇸 207.90.244.18

🇻🇳 171.231.192.219

🇧🇷 170.245.120.109

🇧🇩 103.96.105.236

🇮🇳 103.84.236.242

🇵🇰 72.255.32.51

🇩🇪 69.5.169.218

🇳🇱 45.148.10.240

🇸🇬 45.78.202.217

🇮🇩 41.216.178.119