JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.56.150.74

149.56.150.74 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 12%: ?

12%

ISP	B.V., Dataprovider
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	crawl-149-56-150-74.dataproviderbot.com
Domain Name	dataprovider.com
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.56.150.74

Whois 149.56.150.74

IP Abuse Reports for 149.56.150.74:

This IP address has been reported a total of 122 times from 32 distinct sources. 149.56.150.74 was first reported on March 25th 2021, and the most recent report was 46 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-05 17:49:57 (46 minutes ago)	(mod_security) mod_security (id:210730) triggered by 149.56.150.74 (crawl-149-56-150-74.dataprovider ... show more (mod_security) mod_security (id:210730) triggered by 149.56.150.74 (crawl-149-56-150-74.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 13:49:53.739329 2026] [security2:error] [pid 4876:tid 4876] [client 149.56.150.74:55901] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ipostsocialmedia.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ipostsocialmedia.com"] [uri "/[email protected]"] [unique_id "akqZQf7costqasbNHyh0dQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-06-02 00:07:12 (1 month ago)	WordPress directory enumeration	Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 15:28:54 (1 month ago)	(mod_security) mod_security (id:243420) triggered by 149.56.150.74 (crawl-149-56-150-74.dataprovider ... show more (mod_security) mod_security (id:243420) triggered by 149.56.150.74 (crawl-149-56-150-74.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 11:28:46.506485 2026] [security2:error] [pid 1005:tid 1005] [client 149.56.150.74:60601] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.debosden.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.debosden.com"] [uri "/contactf/aacontact.html"] [unique_id "agSYru1kGQy-a6ZSztPE0AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇷 bubausluge	2026-04-04 07:02:51 (3 months ago)	Detected by Aegis SOC: Web Scanner \| MITRE: T1595.001 \| Fails: 3 \| Period: 2026-04-03T07:18:07 to 20 ... show more Detected by Aegis SOC: Web Scanner \| MITRE: T1595.001 \| Fails: 3 \| Period: 2026-04-03T07:18:07 to 2026-04-03T07:18:07 show less	Port Scan
🇷🇺 6o6ep	2026-04-04 03:40:57 (3 months ago)	client denied by server configuration	Port Scan Hacking Bad Web Bot
🇩🇪 Viveronese	2026-02-25 21:19:08 (4 months ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 SCHAPPY	2026-01-25 01:17:00 (5 months ago)	Bad bot identified by user agent	Bad Web Bot
🇺🇸 LotPhantom	2026-01-17 01:23:54 (5 months ago)	149.56.150.74 - - [17/Jan/2026:01:23:14 +0000] "OPTIONS / HTTP/1.1" 404 9 "-" "Mozilla/5.0 (compatib ... show more 149.56.150.74 - - [17/Jan/2026:01:23:14 +0000] "OPTIONS / HTTP/1.1" 404 9 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" ... show less	Web App Attack
🇩🇪 Hary74656	2025-12-08 12:18:21 (6 months ago)	[Mon Dec 08 13:18:13.312248 2025] [core:info] [pid 304125:tid 304178] [client 149.56.150.74:47863] A ... show more [Mon Dec 08 13:18:13.312248 2025] [core:info] [pid 304125:tid 304178] [client 149.56.150.74:47863] AH00128: File does not exist: /home/harald/www/ads.txt ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-18 09:22:00 (7 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.150.74 (crawl-149-56-150-74.dataprovider ... show more (mod_security) mod_security (id:243420) triggered by 149.56.150.74 (crawl-149-56-150-74.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 04:21:55.522212 2025] [security2:error] [pid 11712:tid 11712] [client 149.56.150.74:59441] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.kokr.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.kokr.org"] [uri "/legal.html"] [unique_id "aRw6s5QS8c0bMSCkNlQ_SwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-11-01 22:15:11 (8 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇩🇪 Hary74656	2025-10-31 09:16:54 (8 months ago)	[Fri Oct 31 10:16:46.528656 2025] [core:info] [pid 456906:tid 456951] [client 149.56.150.74:32973] A ... show more [Fri Oct 31 10:16:46.528656 2025] [core:info] [pid 456906:tid 456951] [client 149.56.150.74:32973] AH00128: File does not exist: /home/harald/www/ads.txt ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-17 17:35:30 (8 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.150.74 (crawl-149-56-150-74.dataprovider ... show more (mod_security) mod_security (id:243420) triggered by 149.56.150.74 (crawl-149-56-150-74.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 17 13:35:23.210025 2025] [security2:error] [pid 6534:tid 6534] [client 149.56.150.74:34603] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.30daysout.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.30daysout.com"] [uri "/links/index.html"] [unique_id "aPJ-W9U8WK00N57SCw1Q1AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kranem	2025-10-03 12:00:37 (9 months ago)	Triggered Cloudflare WAF from CA. Action taken: BLOCK ASN: 16276 (OVH) Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF from CA. Action taken: BLOCK ASN: 16276 (OVH) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-10-03T09:36:57Z User-Agent: Mozilla/5.0 (compatible; Dataprovider.com) show less	Bad Web Bot
Anonymous	2025-09-18 12:47:14 (9 months ago)	Excessive crawling/scraping	Hacking Brute-Force

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.144.90.41

🇸🇾 212.68.59.7

🇬🇧 185.247.137.25

🇧🇾 93.125.107.91

🇨🇦 85.217.149.5

🇸🇪 85.203.44.150

🇻🇳 14.177.78.0

🇨🇳 223.109.49.166

🇨🇳 218.92.251.198

🇻🇪 190.89.31.16

🇲🇽 189.217.201.1

🇲🇽 189.190.244.176

🇩🇪 172.217.34.26

🇳🇱 92.111.90.74

🇺🇸 81.30.98.81

🇸🇬 47.82.13.226

🇦🇿 37.114.147.147

🇸🇮 31.57.216.6

🇨🇳 14.103.127.7

🇫🇮 5.181.168.245