JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.66.135.58

102.66.135.58 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 27%: ?

27%

ISP	Herotel
Usage Type	Fixed Line ISP
ASN	AS328471
Domain Name	herotel.com
Country	🇿🇦 South Africa
City	Robertson, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.66.135.58

Whois 102.66.135.58

IP Abuse Reports for 102.66.135.58:

This IP address has been reported a total of 30 times from 12 distinct sources. 102.66.135.58 was first reported on July 17th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 stinpriza	2026-10-26 20:23:12 (16 hours ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-10-23 10:27:30 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 102.66.135.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.66.135.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:27:26.211589 2026] [security2:error] [pid 32452:tid 32452] [client 102.66.135.58:54198] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jamisongreen.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jamisongreen.com"] [uri "/"] [unique_id "ats2jsfopADA_IJA7CJI4gAAAA8"], referer: https://bikisbeautifulpeople.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-26 15:24:59 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
Anonymous	2026-09-23 23:25:34 (1 month ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇺🇸 鬼影233	2026-09-11 06:17:15 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 04:28:50 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A320&f%5B1%5D=digest_key_terms%3A322&f%5B2%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B308%5D=308 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-27 06:30:44 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-23 20:17:14 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-20 17:43:19 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-07-31 11:41:22 (2 months ago)	denied traffic to a honeypot network. destination port 23083.	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-07-31 04:18:46 (2 months ago)	(mod_security) mod_security (id:220150) triggered by 102.66.135.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:220150) triggered by 102.66.135.58 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 00:18:39.408168 2026] [security2:error] [pid 672632:tid 672632] [client 102.66.135.58:26416] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\.{0,399}\\\\\\\\/)?select)" at ARGS:route. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)\|\|www.skipspsaexchange.com\|F\|2"] [data "')//and//('czzjrv'='czzjrv'//union//all//select//'qpaqssiydmtmlzffsnkktlgiwnemferz',null--/*/fhcoe4"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.skipspsaexchange.com"] [uri "/index.php"] [unique_id "amwiH5HKMDVQdX45z4SctAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (5 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61	DDoS Attack
Anonymous	2026-05-16 16:23:00 (5 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
🇺🇸 quilla	2026-04-03 03:20:35 (6 months ago)	Botnet infected device observed in honeypot (Vector: TCP)	DDoS Attack
🇫🇷 security.rdmc.fr	2026-01-07 03:15:49 (9 months ago)	Port Scan Attack proto:TCP src:53328 dst:23	Port Scan

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.123.33.105

🇮🇩 202.145.0.18

🇺🇸 172.237.156.206

🇨🇦 172.69.214.210

🇫🇮 170.168.97.188

🇩🇪 167.94.146.71

🇯🇵 124.155.125.131

🇲🇾 123.253.35.15

🇰🇷 118.37.214.187

🇸🇪 94.254.25.158

🇰🇿 91.237.167.21

🇳🇱 91.108.9.50

🇺🇸 72.178.186.107

🇺🇸 70.167.235.236

🇨🇳 47.96.167.113

🇺🇸 45.146.54.93

🇺🇸 17.166.155.203

🇧🇷 16.5.0.169

🇬🇧 143.110.175.203

🇳🇱 134.122.48.179