102.66.145.21

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
46% Elevated
26 reports
19 reporters · latest 1 week ago
ISP
Herotel
Usage Type
Fixed Line ISP
ASN
AS328471
Domain Name
herotel.com
Country
🇿🇦 South Africa
City
Potchefstroom, North West
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
26 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 3 🇮🇹 Italy 2 🇱🇺 Luxembourg 2
Most common categories Brute-Force 10 Bad Web Bot 3 Exploited Host 2 DDoS Attack 1 Open Proxy 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Hacking Bad Web Bot
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
Anonymous
SMTP brute force - auth failed
Brute-Force Exploited Host
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 102.66.145.21 2026-10-24T13:59:34+0200 warning: unknown[102.66.145.21]: SASL authentication failed
Brute-Force
🇹🇷 Jova
Part of a distributed password attack on a mail account (SMTP logins from many IPs).
Brute-Force
🇸🇮 basing
2026-10-24 12:20:17 bs SASL PLAIN auth failed: rhost=102.66.145.21...
Brute-Force
🇫🇷 Stara
Distributed smtpauth, imapd and ftp login attacks or more than 2 temp blocks in the last 259200 secs
Brute-Force DDoS Attack
🇮🇹 CoreTech srl
Brute-Force Open Proxy
Anonymous
SMTP brute force - auth failed
Brute-Force Exploited Host
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇮🇹 VHosting
Detected mail brute force attack from different servers
Brute-Force
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 kosada.com
Web bot: DDoS
DDoS Attack Bad Web Bot
Anonymous
denied traffic to a non-approved destination port. destination port 45856.
Port Scan
🇩🇪 SMARTNET
Aisuru(Mirai variant) DDoS | Incident ID: 1175168a-7e6d-467e-bb9a-dd1cdfa3fb9e
DDoS Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇱 190.161.81.149
🇦🇷 186.124.15.23
🇲🇴 182.93.7.194
🇩🇪 178.20.28.170
🇺🇸 173.249.252.120
🇺🇸 162.243.161.188
🇻🇳 157.66.81.100
🇺🇸 89.45.4.186
🇺🇸 72.212.168.84
🇺🇸 23.234.108.54
🇺🇸 23.234.77.68
🇺🇸 172.190.51.254
🇺🇸 162.216.149.50
🇺🇸 156.232.13.246
🇺🇸 146.70.187.223
🇯🇵 103.102.247.116
🇧🇪 34.78.148.69
🇺🇸 23.234.102.94
🇺🇸 23.234.94.92
🇺🇸 23.234.94.62
feedback