JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.102.57.153

212.102.57.153 was found in our database!

This IP was reported 539 times. Confidence of Abuse is 0%: ?

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-212-102-57-153.cdn77.com
Domain Name	datacamp.co.uk
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.102.57.153

Whois 212.102.57.153

IP Abuse Reports for 212.102.57.153:

This IP address has been reported a total of 539 times from 126 distinct sources. 212.102.57.153 was first reported on July 12th 2021, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alboweb B.V.	2026-01-17 02:18:36 (5 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
Anonymous	2026-01-12 22:36:10 (5 months ago)	(smtpauth) Failed SMTP AUTH login from 212.102.57.153 (DE/Germany/unn-212-102-57-153.cdn77.com)	Brute-Force
🇧🇪 cmbplf	2025-12-09 03:21:33 (6 months ago)	745 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:0.9.3) Gecko/200108 ... show more 745 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:0.9.3) Gecko/20010802 742 requests with user_agent.original Mozilla/5.0 (Linux; Android 6.0.1; SM-G532MT Build/MMB29T; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/99.0.4844.88 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/436.0.0.35.101;] 721 requests with user_agent.original Mozilla/5.0 (Linux; Android 13; SAMSUNG SM-T220) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.36 719 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/20020623 Debian/1.0.0-0.woody.1 712 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.6) Gecko/20050319 704 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [LinkedInApp]/9.28.7586 700 requests with user_agent.original Mozilla/5.0 (Linux; Android 13; SM-F711U) Apple show less	Brute-Force Bad Web Bot
🇫🇷 Kimax	2025-12-08 05:36:05 (6 months ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇫🇷 Kimax	2025-12-07 05:21:46 (6 months ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇫🇷 Kimax	2025-12-06 05:07:15 (6 months ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇫🇷 Kimax	2025-12-03 04:43:49 (6 months ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇫🇷 Kimax	2025-12-02 04:25:29 (6 months ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇫🇷 Kimax	2025-12-01 04:23:31 (7 months ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇩🇪 Freenex1911	2025-11-18 10:26:06 (7 months ago)	2025-11-18T10:26:05Z - RDP login from 212.102.57.153 failed multiple times.	Brute-Force
🇦🇺 AWW-Admin	2025-11-18 10:23:35 (7 months ago)	(mod_security) mod_security triggered on hostname [redacted] 212.102.57.153 (DE/Germany/unn-212-102- ... show more (mod_security) mod_security triggered on hostname [redacted] 212.102.57.153 (DE/Germany/unn-212-102-57-153.cdn77.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2025-11-18 09:21:04 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 212.102.57.153 (unn-212-102-57-153.cdn77.com): ... show more (mod_security) mod_security (id:210730) triggered by 212.102.57.153 (unn-212-102-57-153.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 04:20:59.084485 2025] [security2:error] [pid 31628:tid 31671] [client 212.102.57.153:50433] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|luxury.management\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "luxury.management"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aRw6e_F9FOKAhaDqtBA20AAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ingroscart.it	2025-11-18 06:56:46 (7 months ago)	(mod_security) mod_security triggered on hostname [redacted] 212.102.57.153 (DE/Germany/unn-212-102- ... show more (mod_security) mod_security triggered on hostname [redacted] 212.102.57.153 (DE/Germany/unn-212-102-57-153.cdn77.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2025-11-18 06:53:13 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 212.102.57.153 (unn-212-102-57-153.cdn77.com): ... show more (mod_security) mod_security (id:210730) triggered by 212.102.57.153 (unn-212-102-57-153.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 01:53:09.770048 2025] [security2:error] [pid 7141:tid 7141] [client 212.102.57.153:61341] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|zodiacwin.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zodiacwin.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aRwX1XKeV0UgZyTzwjtm2gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-18 05:55:11 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 212.102.57.153 (unn-212-102-57-153.cdn77.com): ... show more (mod_security) mod_security (id:210730) triggered by 212.102.57.153 (unn-212-102-57-153.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 00:55:05.133841 2025] [security2:error] [pid 26340:tid 26340] [client 212.102.57.153:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|afroditbet.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "afroditbet.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aRwKOcJ6XnPRJ17v1puiWQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 539 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c6a::12a

🇺🇸 216.25.89.116

🇺🇸 173.25.42.30

🇿🇦 154.73.17.22

🇲🇾 121.122.119.4

🇷🇴 94.156.152.234

🇩🇪 69.5.169.174

🇺🇸 64.62.197.231

🇺🇸 64.62.197.197

🇰🇷 59.15.58.148

🇭🇰 45.120.216.232

🇬🇧 213.166.84.54

🇨🇳 180.76.176.249

🇷🇺 178.219.146.105

🇸🇪 104.245.243.179

🇲🇦 41.250.157.165

🇳🇱 5.187.35.26

🇨🇳 222.176.201.159

🇳🇱 213.177.179.12

🇬🇧 213.166.84.62