JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.56.160.208

149.56.160.208 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 20%: ?

20%

ISP	B.V., Dataprovider
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	crawl-149-56-160-208.dataproviderbot.com
Domain Name	dataprovider.com
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.56.160.208

Whois 149.56.160.208

IP Abuse Reports for 149.56.160.208:

This IP address has been reported a total of 83 times from 30 distinct sources. 149.56.160.208 was first reported on April 13th 2022, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sorgin Informatique	2026-07-16 15:32:06 (4 hours ago)	nee-88 : Bloc AI bots=>/(Dataprovider)	Hacking
🇺🇸 TPI-Abuse	2026-07-07 15:20:01 (1 week ago)	(mod_security) mod_security (id:243420) triggered by 149.56.160.208 (crawl-149-56-160-208.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.160.208 (crawl-149-56-160-208.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 11:19:56.591002 2026] [security2:error] [pid 16955:tid 16955] [client 149.56.160.208:54879] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.rogerloft.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.rogerloft.com"] [uri "/index.html"] [unique_id "ak0ZHK2rQ4niUaX1nFONjQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-05-27 06:04:12 (1 month ago)	WordPress directory enumeration	Web App Attack
🇺🇸 etu brutus	2026-05-18 07:33:42 (1 month ago)	149.56.160.208 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇫🇷 conseilgouz	2026-05-04 13:57:27 (2 months ago)	sae-88 : Bloc AI bots=>/(Dataprovider)	Hacking
🇨🇳 ThreatBook.io	2026-05-03 01:22:32 (2 months ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/149.56.160.208 2026-05-02 16 ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/149.56.160.208 2026-05-02 16:27:08 / show less	Web App Attack
Anonymous	2026-05-01 21:58:13 (2 months ago)	[Fri May 01 23:58:05.920319 2026] [access_compat:error] [pid 397129:tid 397129] [client 149.56.160.2 ... show more [Fri May 01 23:58:05.920319 2026] [access_compat:error] [pid 397129:tid 397129] [client 149.56.160.208:0] AH01797: client denied by server configuration: /var/www/wordpress/cleanextraction/ads.txt [Fri May 01 23:58:08.251774 2026] [access_compat:error] [pid 397156:tid 397156] [client 149.56.160.208:0] AH01797: client denied by server configuration: /var/www/wordpress/cleanextraction/llms.txt [Fri May 01 23:58:09.629360 2026] [access_compat:error] [pid 397135:tid 397135] [client 149.56.160.208:0] AH01797: client denied by server configuration: /var/www/wordpress/cleanextraction/humans.txt [Fri May 01 23:58:11.037433 2026] [access_compat:error] [pid 397135:tid 397135] [client 149.56.160.208:0] AH01797: client denied by server configuration: /var/www/wordpress/cleanextraction/security.txt [Fri May 01 23:58:12.747868 2026] [access_compat:error] [pid 397136:tid 397136] [client 149.56.160.208:0] AH01797: client denied by server configuration: /var/www/wordpress/cleanextraction/.well-known/se ... show less	Web Spam Web App Attack
🇨🇿 sajmon0011	2026-03-12 09:02:08 (4 months ago)	149.56.160.208 - - [12/Mar/2026:10:02:08 +0100] "GET /robots.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 ... show more 149.56.160.208 - - [12/Mar/2026:10:02:08 +0100] "GET /robots.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" ... show less	Web App Attack
🇺🇸 chronos	2026-02-21 01:42:20 (4 months ago)	[AUTORAVALT][[20/02/2026 - 22:42:20 -03:00 UTC] Attack from [OVH Hosting, Inc.] [149.56.160.208][cra ... show more [AUTORAVALT][[20/02/2026 - 22:42:20 -03:00 UTC] Attack from [OVH Hosting, Inc.] [149.56.160.208][crawl-149-56-160-208.dataproviderbot.com] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software] ... show less	Hacking Web App Attack
🇳🇱 ParaBug	2026-01-23 07:17:28 (5 months ago)	149.56.160.208 - - [23/Jan/2026:08:17:28 +0100] "OPTIONS / HTTP/1.1" 200 3852 "-" "Mozilla/5.0 (comp ... show more 149.56.160.208 - - [23/Jan/2026:08:17:28 +0100] "OPTIONS / HTTP/1.1" 200 3852 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" ... show less	Phishing Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-01-06 14:43:17 (6 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.160.208 (crawl-149-56-160-208.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.160.208 (crawl-149-56-160-208.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 06 09:43:10.485968 2026] [security2:error] [pid 7020:tid 7020] [client 149.56.160.208:51047] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.texasfurnitureinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.texasfurnitureinc.com"] [uri "/venta-de-camas"] [unique_id "aV0ffuttiIunaSs2HCbEogAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-31 00:40:14 (6 months ago)		Web App Attack
Anonymous	2025-11-25 12:07:21 (7 months ago)	149.56.160.208 - - [25/Nov/2025:12:07:19 +0000] "GET /sitemap.xml HTTP/1.0" 404 4385 "-" "Mozilla/5. ... show more 149.56.160.208 - - [25/Nov/2025:12:07:19 +0000] "GET /sitemap.xml HTTP/1.0" 404 4385 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.160.208 - - [25/Nov/2025:12:07:20 +0000] "GET /llms.txt HTTP/1.0" 404 4385 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.160.208 - - [25/Nov/2025:12:07:20 +0000] "GET /humans.txt HTTP/1.0" 404 4385 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.160.208 - - [25/Nov/2025:12:07:21 +0000] "GET /ads.txt HTTP/1.0" 404 4385 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" ... show less	Web App Attack
Anonymous	2025-11-01 02:10:00 (8 months ago)	Unauthorized connection attempt	Brute-Force
🇨🇭 backslash	2025-10-04 17:20:25 (9 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2001:67c:e60:c0c:192:42:116:101

🇰🇷 210.183.21.53

🇮🇩 203.148.85.30

🇨🇴 200.75.46.82

🇺🇸 154.12.252.42

🇦🇹 109.70.100.8

🇸🇬 43.133.61.254

🇬🇭 41.242.115.84

🇺🇸 20.127.185.37

🇺🇸 17.22.245.175

🇩🇪 2400:8d60:4::1:374a:3509

🇺🇸 162.216.149.33

🇦🇺 101.177.4.57

🇱🇹 81.30.98.44

🇱🇺 64.89.160.39

🇳🇱 45.148.10.152

🇺🇸 20.46.252.52

🇫🇷 15.237.57.234

🇮🇱 2.55.75.176

🇺🇸 209.141.46.157