JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.102.48.16

212.102.48.16

Recent Activity

640 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Datacamp Limited

Usage Type

Data Center/Web Hosting/Transit

ASN

AS60068

Hostname(s)

unn-212-102-48-16.cdn77.com

Domain Name

datacamp.co.uk

Country

🇪🇸 Spain

City

Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 212.102.48.16:

This IP address has been reported a total of 640 times from 110 distinct sources. 212.102.48.16 was first reported on November 28th 2020, and the most recent report was 8 hours ago. In the last 60 days, the top reporter locations were: Germany with 10 reports; United States of America with 8 reports; Brazil with 3 reports. The most common categories in these recent reports were: Web App Attack 22 times; Brute-Force 10 times; Bad Web Bot 8 times; Hacking 8 times; SQL Injection 1 time; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-09-11 02:43:22 (8 hours ago)	[02:43] Attempted VNC authentication (DES challenge-response)	Hacking Brute-Force
🇺🇸 wristhulk	2026-09-10 06:45:30 (1 day ago)	Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wo ... show more Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist). show less	Brute-Force
🇺🇸 drewf.ink	2026-09-10 06:41:35 (1 day ago)	[06:41] Attempted VNC authentication (DES challenge-response)	Hacking Brute-Force
🇩🇪 nyuuzyou	2026-09-08 15:22:34 (2 days ago)	Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ... show more Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-08T15:22:34Z. show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-08-26 04:14:54 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247	Exploited Host Web App Attack
🇩🇪 tsZero	2026-08-26 03:29:32 (2 weeks ago)	Scan example: path=/xmlrpc.php?rsd status=403	Hacking
🇬🇧 AvonleaConsulting	2026-08-26 02:24:04 (2 weeks ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 02:21:36 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 212.102.48.16 (unn-212-102-48-16.cdn77.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 212.102.48.16 (unn-212-102-48-16.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 22:21:29.687646 2026] [security2:error] [pid 9738:tid 9738] [client 212.102.48.16:50140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|help.go4food.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "help.go4food.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ao5NqXqawz-v_4Ii_JBQ5wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-08-26 01:02:09 (2 weeks ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
Anonymous	2026-08-26 00:10:12 (2 weeks ago)	212.102.48.16 - - [26/Aug/2026:02:10:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 591 "-" "Mozilla/5.0 ... show more 212.102.48.16 - - [26/Aug/2026:02:10:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.102.48.16 - - [26/Aug/2026:02:10:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.102.48.16 - - [26/Aug/2026:02:10:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.102.48.16 - - [26/Aug/2026:02:10:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.102.48.16 - - [26/Aug/2026:02:10:12 +0200] "POST //xmlrpc.php HTTP/1.1" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ... show less	Brute-Force Web App Attack
🇮🇹 madaello	2026-08-25 23:07:27 (2 weeks ago)	212.102.48.16 - - [26/Aug/2026:01:07:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 646 "-" "Mozilla/5.0 ... show more 212.102.48.16 - - [26/Aug/2026:01:07:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.102.48.16 - - [26/Aug/2026:01:07:26 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.102.48.16 - - [26/Aug/2026:01:07:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Web App Attack
🇩🇪 DocNetzwerk	2026-08-25 22:48:14 (2 weeks ago)	(wordpress) Failed wordpress login from 212.102.48.16 (ES/Spain/unn-212-102-48-16.cdn77.com)	Brute-Force
🇧🇷 dominioz	2026-08-25 21:46:32 (2 weeks ago)	2026-08-25 17:57:40 GET /sito/wp-includes/wlwmanifest.xml X-ARR-CACHE-HIT=0&X-ARR-LOG-ID=82a51c80-98 ... show more 2026-08-25 17:57:40 GET /sito/wp-includes/wlwmanifest.xml X-ARR-CACHE-HIT=0&X-ARR-LOG-ID=82a51c80-9876-409c-a4aa-ab4630b7137a&SERVER-STATUS=404 - 212.102.48.16 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 404 1261 2026-08-25 20:07:15 GET /xmlrpc.php rsd - 212.102.48.16 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 404 245 2026-08-25 20:07:15 GET /xmlrpc.php rsd - 212.102.48.16 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 404 245 2026-08-25 21:46:19 GET /xmlrpc.php rsd - 212.102.48.16 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 301 591 ... show less	Web App Attack
🇫🇷 largo-it.net	2026-08-25 21:21:28 (2 weeks ago)	Aug 25 23:21:27 vps-9f3cdc33 haproxy[3762726]: 212.102.48.16:60716 [25/Aug/2026:23:21:26.907] www_fr ... show more Aug 25 23:21:27 vps-9f3cdc33 haproxy[3762726]: 212.102.48.16:60716 [25/Aug/2026:23:21:26.907] www_frontend~ finance_cluster/finance1_test1_https 45/0/11/42/98 404 3121 - - ---- 56/7/0/0/0 0/0 "GET /fr//wp-includes/wlwmanifest.xml HTTP/1.1" Aug 25 23:21:27 vps-9f3cdc33 haproxy[3762726]: 212.102.48.16:60716 [25/Aug/2026:23:21:27.005] www_frontend~ finance_cluster/finance1_test1_https 45/0/11/44/100 404 3121 - - ---- 56/7/1/1/0 0/0 "GET /fr//xmlrpc.php?rsd HTTP/1.1" Aug 25 23:21:27 vps-9f3cdc33 haproxy[3762726]: 212.102.48.16:60716 [25/Aug/2026:23:21:27.812] www_frontend~ finance_cluster/finance1_test1_https 91/0/11/42/144 404 3121 - - ---- 57/8/0/0/0 0/0 "GET /fr//blog/wp-includes/wlwmanifest.xml HTTP/1.1" Aug 25 23:21:28 vps-9f3cdc33 haproxy[3762726]: 212.102.48.16:60716 [25/Aug/2026:23:21:27.956] www_frontend~ finance_cluster/finance1_test1_https 45/0/11/47/103 404 3121 - - ---- 57/8/0/0/0 0/0 "GET /fr//web/wp-includes/wlwmanifest.xml HTTP/1.1" Aug 25 23:21:28 vps-9f3cdc33 haproxy[3762 ... show less	Hacking Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-08-25 20:30:01 (2 weeks ago)	Imunify360 WAF block (graylisted)	Web App Attack

Showing 1 to 15 of 640 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2a00:1d20:49:1:9999::197

🇹🇼 220.133.95.63

🇮🇩 202.46.28.140

🇷🇴 193.32.162.84

🇧🇷 190.89.55.250

🇹🇼 111.70.29.124

🇧🇬 109.160.32.79

🇮🇳 106.51.79.73

🇺🇸 64.62.156.69

🇹🇷 212.175.76.20

🇳🇱 192.178.118.151

🇮🇩 150.107.248.141

🇧🇩 123.200.14.14

🇺🇸 35.90.218.51

🇺🇸 34.20.243.193

🇩🇪 31.220.3.165

🇺🇸 216.26.228.133

🇺🇸 192.185.81.201

🇺🇸 156.146.54.75

🇺🇸 136.107.245.212