JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.66.147.203

102.66.147.203 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 34%: ?

34%

ISP	Herotel
Usage Type	Fixed Line ISP
ASN	AS328471
Domain Name	herotel.com
Country	🇿🇦 South Africa
City	Gqeberha, Eastern Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.66.147.203

Whois 102.66.147.203

IP Abuse Reports for 102.66.147.203:

This IP address has been reported a total of 15 times from 10 distinct sources. 102.66.147.203 was first reported on July 31st 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-26 10:42:07 (20 hours ago)	(mod_security) mod_security (id:225170) triggered by 102.66.147.203 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.66.147.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 06:42:01.668281 2026] [security2:error] [pid 11762:tid 11762] [client 102.66.147.203:9556] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lovebuilds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lovebuilds.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "at8uec3nFNV19LrxGVWRmgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 09:10:18 (22 hours ago)	(mod_security) mod_security (id:225170) triggered by 102.66.147.203 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.66.147.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 05:10:11.332242 2026] [security2:error] [pid 16049:tid 16049] [client 102.66.147.203:58160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|taste.l3l4.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "taste.l3l4.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at8Y83DqdJSH-MjAu4Mp-AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 08:37:39 (22 hours ago)	(mod_security) mod_security (id:225170) triggered by 102.66.147.203 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.66.147.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:37:30.938030 2026] [security2:error] [pid 5267:tid 5267] [client 102.66.147.203:44400] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|coolcustomproducts.benshermanguitar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coolcustomproducts.benshermanguitar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at8RStHTgv2P_fFK0u6dhwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 billyborsht	2026-10-26 00:09:29 (1 day ago)	2026-10-26T13:09:27.399919+13:00 southern wordpress(www.dave.moskovitz.co.nz)[861441]: Authenticatio ... show more 2026-10-26T13:09:27.399919+13:00 southern wordpress(www.dave.moskovitz.co.nz)[861441]: Authentication attempt for unknown user rogermorris from 102.66.147.203 ... show less	Hacking Web App Attack
🇹🇷 pashait	2026-10-24 11:51:45 (2 days ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5 ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5min) at 2026-10-24 11:51 show less	Hacking
🇺🇸 鬼影233	2026-10-22 05:39:36 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
Anonymous	2026-10-07 01:51:55 (2 weeks ago)	denied traffic to a honeypot network. destination port 39037.	Port Scan Hacking
🇺🇸 鬼影233	2026-09-18 12:15:39 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-11 19:11:34 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇰🇷 winter	2026-08-13 16:41:39 (2 months ago)	Connection attemp from 102.66.147.203 to port 22	Brute-Force SSH
🇩🇪 pltcldvlpr	2026-06-19 17:57:09 (4 months ago)	Bogus Useragent: 102.66.147.203 - - [19/Jun/2026:19:57:08 +0200] "GET /protocol?id=rp_15_102&paragra ... show more Bogus Useragent: 102.66.147.203 - - [19/Jun/2026:19:57:08 +0200] "GET /protocol?id=rp_15_102&paragraph=11222329&seq=1230 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.1; Trident/3.0)" asn=328471 org="HERO TELECOMS (PTY) LTD" country=ZA ... show less	Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (5 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
Anonymous	2026-01-09 00:26:08 (9 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2025-11-22 23:07:23 (11 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-07-31 03:04:21 (1 year ago)	http-no-verb	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.217.129.141

🇺🇸 151.240.93.18

🇨🇳 120.224.237.3

🇨🇳 120.198.23.233

🇮🇳 106.219.71.26

🇮🇩 69.5.20.133

🇺🇸 40.74.210.29

🇦🇷 207.191.165.131

🇸🇬 193.37.32.70

🇺🇸 156.225.64.56

🇸🇳 154.125.120.7

🇮🇳 117.195.205.201

🇧🇪 109.136.226.216

🇮🇳 106.219.172.218

🇮🇳 106.202.72.127

🇳🇱 77.67.26.4

🇲🇾 47.254.202.77

🇮🇩 43.133.139.6

🇺🇸 40.124.123.98

🇺🇸 40.119.25.141