🇷🇺
Andrey Ganichvili
2026-06-04 10:40:06
(3 days ago)
Unauthorized sitemap access (/sitemap.xml) from 149.56.150.4
Web App Attack
🇬🇧
AvonleaConsulting
2026-06-02 22:50:59
(5 days ago)
Brute force attack stopped by firewall
Web Spam
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-25 17:37:33
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 149.56.150.4 (crawl-149-56-150-4.dataproviderbo ...
show more
(mod_security) mod_security (id:210730) triggered by 149.56.150.4 (crawl-149-56-150-4.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 13:37:27.252355 2026] [security2:error] [pid 7112:tid 7112] [client 149.56.150.4:47113] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.69strains.com|F|2"] [data ".cannapages.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.69strains.com"] [uri "/www.cannapages.com"] [unique_id "aez711DYCAzw6OeautzWFQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-11 01:45:32
(1 month ago)
(mod_security) mod_security (id:243420) triggered by 149.56.150.4 (crawl-149-56-150-4.dataproviderbo ...
show more
(mod_security) mod_security (id:243420) triggered by 149.56.150.4 (crawl-149-56-150-4.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 21:45:27.637627 2026] [security2:error] [pid 692518:tid 692518] [client 149.56.150.4:50629] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.happyjackmc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.happyjackmc.com"] [uri "/index.html"] [unique_id "admnt16K0r3GkpEvRbeI5gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Carsten
2026-03-14 10:40:35
(2 months ago)
Bad web bot [Mozilla/5.0 (compatible; Dataprovider.com)]
Bad Web Bot
🇩🇪
Didier Lagaert
2026-03-10 09:24:39
(2 months ago)
lie-88 : Bloc AI bots=>/(Dataprovider)
Hacking
🇬🇧
MrTumnus
2026-01-01 22:03:12
(5 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2025-10-22 07:04:43
(7 months ago)
(mod_security) mod_security (id:243420) triggered by 149.56.150.4 (crawl-149-56-150-4.dataproviderbo ...
show more
(mod_security) mod_security (id:243420) triggered by 149.56.150.4 (crawl-149-56-150-4.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 03:04:38.781826 2025] [security2:error] [pid 652:tid 682] [client 149.56.150.4:43833] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.totalbodycare753.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.totalbodycare753.com"] [uri "/"] [unique_id "aPiCBtTtCxhWdqrGfoAHJwAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-13 09:23:03
(9 months ago)
Domain : awebsheep.nl
Rule : config
2025-08-13 09:22:00 136.144.178.176 GET /.well-known/security.tx ...
show more
Domain : awebsheep.nl
Rule : config
2025-08-13 09:22:00 136.144.178.176 GET /.well-known/security.txt - 443 - 149.56.150.4 HTTP/1.1 Mozilla/5.0 (compatible; Dataprovider.com) - www.awebsheep.nl 404 0 2 1405 266 89 - -
show less
Hacking
SQL Injection
🇨🇭
backslash
2025-08-10 05:43:27
(9 months ago)
Bad Web Bot
🇩🇪
Vinyamar
2025-08-09 07:29:40
(9 months ago)
VSecCenter: WebApp Probe detected. | 7 in 24h
Bad Web Bot
🇨🇳
ThreatBook.io
2025-08-02 23:42:03
(10 months ago)
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/149.56.150.4
2025-08-0 ...
show more
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/149.56.150.4
2025-08-02 02:50:00 /
show less
Web App Attack
2025-07-04 14:04:02
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-07-01 07:18:05
(11 months ago)
Excessive crawling/scraping
Hacking
Brute-Force
2025-06-03 10:25:41
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH