AbuseIPDB » 102.66.141.214
102.66.141.214
This IP was reported 10 times. Confidence of
Abuse
is 17% : ?
ISP
Herotel
Usage Type
Fixed Line ISP
ASN
AS328471
Domain Name
herotel.com
Country
🇿🇦
South Africa
City
East London, Eastern Cape
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 102.66.141.214 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
102.66.141.214 was first reported on
June 22nd 2025 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-08-25 13:22:50
(1 week ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇩🇪
Vegascosmetics
2026-08-16 02:49:53
(2 weeks ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected
show less
Hacking
Exploited Host
Web App Attack
🇮🇹
A000Z
2026-07-05 01:16:59
(1 month ago)
Fail2Ban: 102.66.141.214 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ...
show more
Fail2Ban: 102.66.141.214 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
Bad Web Bot
2026-06-30 08:17:23
(2 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2025-11-25 17:46:34
(9 months ago)
scanning http requests from known botnet
Web App Attack
🇮🇩
hermawan
2025-11-18 17:01:53
(9 months ago)
[Wed Nov 19 00:00:14.973099 2025] [security2:error] [pid 63460:tid 139673770895040] [client 102.66.1 ...
show more
[Wed Nov 19 00:00:14.973099 2025] [security2:error] [pid 63460:tid 139673770895040] [client 102.66.141.214:63853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 request_line = GET /index.php/monitoring-hari-tanpa-hujan-berturut-turut/3881-monitoring-hari-tanpa-hujan-berturut-turut-indonesia/monitoring-hari-tanpa-hujan-berturut-turut-indonesia-tahun-2018/347-monitoring-hari-tanpa-hujan-berturut-turut-di-indonesia-pemutakhiran-20-september-2018 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/monitoring-hari-tanpa-hujan-berturut-turut/3881-monitoring-hari-tanpa-huja
...
show less
Hacking
Web App Attack
2025-11-17 16:23:36
(9 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-16 20:44:26
(9 months ago)
scanning http requests from known botnet
Web App Attack
🇪🇸
Global Cyber Police
2025-07-28 03:50:40
(1 year ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2025-06-22 04:12:39
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: