JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.56.160.228

149.56.160.228 was found in our database!

This IP was reported 115 times. Confidence of Abuse is 27%: ?

27%

ISP	B.V., Dataprovider
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	crawl-149-56-160-228.dataproviderbot.com
Domain Name	dataprovider.com
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.56.160.228

Whois 149.56.160.228

IP Abuse Reports for 149.56.160.228:

This IP address has been reported a total of 115 times from 36 distinct sources. 149.56.160.228 was first reported on August 3rd 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Viveronese	2026-07-04 16:10:33 (1 day ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 filstal.org	2026-06-23 01:24:06 (1 week ago)	Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban	Bad Web Bot
🇸🇪 teskedsgumman.se	2026-06-16 06:48:00 (2 weeks ago)	content scraper on a bio site......:) with two links...	Bad Web Bot Hacking
Anonymous	2026-06-01 19:07:24 (1 month ago)	149.56.160.228 - - [01/Jun/2026:21:07:24 +0200] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatibl ... show more 149.56.160.228 - - [01/Jun/2026:21:07:24 +0200] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; )" show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-20 15:43:05 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 149.56.160.228 (crawl-149-56-160-228.dataprovid ... show more (mod_security) mod_security (id:210730) triggered by 149.56.160.228 (crawl-149-56-160-228.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 11:43:01.773839 2026] [security2:error] [pid 804:tid 804] [client 149.56.160.228:45609] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.rodrandolph.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.rodrandolph.com"] [uri "/facebook.com"] [unique_id "ag3Whbf40rSpXkPnrfGhlQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-05-07 09:24:50 (1 month ago)	(mod_security) mod_security (id:900209) triggered by 149.56.160.228 (CA/Canada/crawl-149-56-160-228. ... show more (mod_security) mod_security (id:900209) triggered by 149.56.160.228 (CA/Canada/crawl-149-56-160-228.dataproviderbot.com): 5 in the last 900 secs show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-02-16 06:07:37 (4 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.160.228 (crawl-149-56-160-228.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.160.228 (crawl-149-56-160-228.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 01:07:33.548594 2026] [security2:error] [pid 1192:tid 1199] [client 149.56.160.228:57989] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.hdtv55.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.hdtv55.com"] [uri "/contact.html"] [unique_id "aZK0JRyf68FcvXS8ll7l8gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-02-09 12:07:48 (4 months ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 SCHAPPY	2025-12-23 03:11:43 (6 months ago)	Bad bot identified by user agent	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-13 22:15:58 (6 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.160.228 (crawl-149-56-160-228.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.160.228 (crawl-149-56-160-228.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 17:15:44.030731 2025] [security2:error] [pid 20167:tid 20167] [client 149.56.160.228:54483] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6649"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.weirdlovemakers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.weirdlovemakers.com"] [uri "/links.html"] [unique_id "aT3lkL1NeSCVWzP7QkkdAAAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 nzhost.co.nz	2025-11-29 11:31:26 (7 months ago)	$f2bV_matches	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-19 03:52:27 (7 months ago)	(mod_security) mod_security (id:243420) triggered by 149.56.160.228 (crawl-149-56-160-228.dataprovid ... show more (mod_security) mod_security (id:243420) triggered by 149.56.160.228 (crawl-149-56-160-228.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 22:52:23.656734 2025] [security2:error] [pid 2135:tid 2135] [client 149.56.160.228:38609] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.newisci.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.newisci.org"] [uri "/contact.html"] [unique_id "aR0-95p61c4ypVAxP5li9wAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2025-11-11 17:21:52 (7 months ago)	doe-88 : Bloc AI bots=>/(Dataprovider)	Hacking
Anonymous	2025-11-09 02:42:51 (7 months ago)	Automated report (2025-11-09T02:42:51+00:00). Scraper detected.	Open Proxy Bad Web Bot
Anonymous	2025-10-05 05:23:00 (9 months ago)	Unauthorized connection attempt	Brute-Force

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 201.208.180.153

🇵🇾 186.17.205.62

🇧🇷 179.125.117.76

🇺🇸 137.184.232.203

🇮🇳 103.74.139.43

🇳🇱 93.174.95.106

🇨🇿 86.49.237.14

🇺🇸 20.169.91.42

🇻🇪 200.8.68.38

🇨🇷 186.64.216.68

🇫🇮 144.31.169.93

🇸🇬 103.253.27.242

🇺🇿 94.158.60.195

🇸🇦 90.148.153.5

🇺🇸 66.132.172.228

🇳🇱 45.148.10.141

🇺🇸 45.79.190.208

🇹🇷 212.98.224.95

🇧🇷 205.210.31.253

🇲🇽 177.226.158.202