JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.56.160.163

149.56.160.163 was found in our database!

This IP was reported 133 times. Confidence of Abuse is 34%: ?

34%

ISP	B.V., Dataprovider
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	crawl-149-56-160-163.dataproviderbot.com
Domain Name	dataprovider.com
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.56.160.163

Whois 149.56.160.163

IP Abuse Reports for 149.56.160.163:

This IP address has been reported a total of 133 times from 45 distinct sources. 149.56.160.163 was first reported on October 25th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-07-06 08:29:38 (1 week ago)	149.56.160.163 - - [06/Jul/2026:10:29:36 +0200] "GET /ads.txt HTTP/2.0" 404 74194 "-" "Mozilla/5.0 ( ... show more 149.56.160.163 - - [06/Jul/2026:10:29:36 +0200] "GET /ads.txt HTTP/2.0" 404 74194 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" ... show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-07-04 14:12:39 (1 week ago)	149.56.160.163 - - [04/Jul/2026:15:12:28 +0100] "GET /ads.txt HTTP/1.1" 404 70613 "-" "Mozilla/5.0 ( ... show more 149.56.160.163 - - [04/Jul/2026:15:12:28 +0100] "GET /ads.txt HTTP/1.1" 404 70613 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.160.163 - - [04/Jul/2026:15:12:29 +0100] "GET /security.txt HTTP/1.1" 404 70613 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.160.163 - - [04/Jul/2026:15:12:29 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 70613 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" ... show less	Hacking Web App Attack
Anonymous	2026-07-04 11:16:29 (1 week ago)	[Sat Jul 04 13:16:27.393272 2026] [access_compat:error] [pid 467837:tid 467837] [client 149.56.160.1 ... show more [Sat Jul 04 13:16:27.393272 2026] [access_compat:error] [pid 467837:tid 467837] [client 149.56.160.163:0] AH01797: client denied by server configuration: /var/www/wordpress/cleanextraction/ads.txt [Sat Jul 04 13:16:27.646835 2026] [access_compat:error] [pid 467837:tid 467837] [client 149.56.160.163:0] AH01797: client denied by server configuration: /var/www/wordpress/cleanextraction/security.txt [Sat Jul 04 13:16:27.761527 2026] [access_compat:error] [pid 467837:tid 467837] [client 149.56.160.163:0] AH01797: client denied by server configuration: /var/www/wordpress/cleanextraction/.well-known/security.txt [Sat Jul 04 13:16:27.875868 2026] [access_compat:error] [pid 467837:tid 467837] [client 149.56.160.163:0] AH01797: client denied by server configuration: /var/www/wordpress/cleanextraction/llms.txt [Sat Jul 04 13:16:27.989924 2026] [access_compat:error] [pid 467837:tid 467837] [client 149.56.160.163:0] AH01797: client denied by server configuration: /var/www/wordpress/cleanextraction/ ... show less	Web Spam Web App Attack
🇦🇺 Anytech	2026-06-28 10:10:09 (2 weeks ago)	Blocked by Conn-Monitor: Automated bot activity	Web App Attack
🇩🇪 Viveronese	2026-06-18 20:41:29 (3 weeks ago)	HTTP vulnerability scanning	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 21:39:27 (1 month ago)	(mod_security) mod_security (id:243420) triggered by 149.56.160.163 (crawl-149-56-160-163.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.160.163 (crawl-149-56-160-163.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:39:20.121956 2026] [security2:error] [pid 28162:tid 28162] [client 149.56.160.163:47357] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.kokr.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.kokr.org"] [uri "/legal.html"] [unique_id "ai3OCMaGGqfWkmXpVF5DfAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 huginet	2026-06-04 07:03:44 (1 month ago)	149.56.160.163 - - [04/Jun/2026:09:03:40 +0200] "GET /ads.txt HTTP/1.1" 404 82685 "-" "Mozilla/5.0 ( ... show more 149.56.160.163 - - [04/Jun/2026:09:03:40 +0200] "GET /ads.txt HTTP/1.1" 404 82685 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.160.163 - - [04/Jun/2026:09:03:42 +0200] "GET /llms.txt HTTP/1.1" 404 82686 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" ... show less	Web Spam Web App Attack
🇨🇳 ThreatBook.io	2026-04-11 00:52:33 (3 months ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/149.56.160.163 2026-04-10 16 ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/149.56.160.163 2026-04-10 16:23:08 /bg-button.png 2026-04-10 16:23:08 /bg-nav.png 2026-04-10 16:23:08 /bg-middle.png 2026-04-10 16:23:07 / 2026-04-10 16:23:07 /tomcat.css 2026-04-10 16:23:08 /tomcat.svg 2026-04-10 16:23:08 /asf-logo-wide.svg 2026-04-10 16:23:08 /bg-upper.png show less	Web App Attack
🇬🇧 AvonleaConsulting	2026-04-10 22:43:07 (3 months ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇫🇮 Shaik Sai Meera	2026-04-08 17:20:11 (3 months ago)	IM360 WAF: Request indicates a Headless browser	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 03:38:53 (3 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.160.163 (crawl-149-56-160-163.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.160.163 (crawl-149-56-160-163.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 23:38:48.416177 2026] [security2:error] [pid 5324:tid 5324] [client 149.56.160.163:58439] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.ospreylake.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.ospreylake.org"] [uri "/AppData/Local/Temp/osprey_milfoil.htm"] [unique_id "abTYSAbVpcr6FCz7O5EMrwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 SilverZippo	2026-02-02 06:04:27 (5 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-01-19 13:42:46 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 149.56.160.163 (crawl-149-56-160-163.dataprovid ... show more (mod_security) mod_security (id:210730) triggered by 149.56.160.163 (crawl-149-56-160-163.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 08:42:42.823667 2026] [security2:error] [pid 26891:tid 26891] [client 149.56.160.163:40443] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.anbruswebdesign.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.anbruswebdesign.com"] [uri "/[email protected]"] [unique_id "aW400uPWKvjRjs9kps1lXQAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-01-16 18:05:46 (5 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇫🇷 Phenix Info	2025-12-01 07:00:59 (7 months ago)	SmallGuard.fr/Prestashop Forbidden Ext.	Web App Attack

Showing 1 to 15 of 133 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 115.209.234.115

🇧🇷 200.4.119.35

🇵🇰 153.117.15.186

🇺🇸 147.185.132.85

🇰🇷 112.216.129.27

🇭🇰 112.119.21.245

🇺🇸 107.150.100.201

🇺🇸 104.28.153.53

🇫🇷 86.194.242.124

🇮🇳 49.42.100.147

🇪🇬 41.65.226.84

🇧🇪 34.62.210.39

🇰🇷 220.74.68.23

🇺🇸 185.223.152.56

172.25.78.139

🇨🇳 121.40.94.13

🇱🇹 77.90.185.37

🇸🇬 51.79.143.228

🇬🇧 35.203.210.65

🇺🇸 20.106.246.17