212.102.41.23
Classification: Malicious
212.102.41.23 is a malicious IP address. Reported by 7 threat sources, last seen 2026-08-15. Network: AS60068 DataCamp Limited.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2025-06-13 00:04:30 | 2026-08-15 11:32:46 | anonymization vpn | |
| Mail Spammer | Barracuda | 2024-10-10 02:18:19 | 2026-08-15 11:32:46 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2025-06-13 02:37:54 | 2026-08-15 04:30:19 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2024-07-28 14:01:22 | 2026-08-15 04:30:19 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2024-09-12 11:22:18 | 2026-08-13 12:03:51 | anomalous-activity attacker malicious-activity reconnaissance | |
| HTTP Attacker | AbuseIPDB | 2024-09-07 11:06:51 | 2026-08-12 23:46:50 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2024-09-07 10:23:55 | 2026-08-12 23:46:50 | anomalous-activity attacker malicious-activity | |
| Hacking | AbuseIPDB | 2024-09-07 11:06:51 | 2026-08-12 19:23:44 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-08-03 00:41:08 | 2026-08-09 18:43:42 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2024-09-10 22:54:02 | 2026-08-07 12:17:07 | attacker compromised malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-09-08 01:03:35 | 2026-03-26 18:05:19 | anomalous-activity | |
| HTTP bot | Blocklist.de | 2024-09-12 08:09:34 | 2025-06-17 07:49:40 | malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2023-10-21 02:31:10 | 2025-06-15 07:40:20 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2023-10-21 02:06:39 | 2025-06-15 06:54:45 | malicious-activity | |
| SQL Injection | AbuseIPDB | 2025-06-12 22:23:08 | 2025-06-14 18:10:54 | malicious-activity | |
| DDoS attack | AbuseIPDB | 2024-09-07 11:01:51 | 2025-06-13 08:08:14 | malicious-activity | |
| Malicious Host | CIArmy | 2023-03-13 10:05:34 | 2023-12-18 09:02:47 | malicious-activity | |
| HTTP Spammer | Sblam | 2023-03-26 06:24:38 | 2023-10-08 22:54:24 | malicious-activity | |
| HTTP Spammer | StopForumSpam.com | 2020-08-28 04:34:48 | 2021-05-12 08:50:57 | malicious-activity |
Tags
bot abuse apache ddos rfi attacker login bruteforce joomla wordpress spamWhois information
- AS name
- AS60068 DataCamp Limited
- AS registry
- ripencc
- AS date
- 1999-06-10 00:00:00
- AS CIDR
- 212.102.40.0/23
- CIDR
- 212.102.40.128/25, 212.102.41.0/24
- Registrant
- DataCamp Limited
- Address
- DataCamp Limited 207 Regent Street London United Kingdom
- City
- Dallas
- State
- TX
- Postal code
- 75202
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2020-08-28 04:34:48
- Last updated
- 2026-08-15 11:32:48
Malicious IPs in the same CIDR
212.102.41.3 212.102.40.218 212.102.41.18 212.102.40.89 212.102.40.82 212.102.41.19 212.102.41.23 212.102.40.42