102.66.181.211

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
31% Elevated
24 reports
17 reporters · latest 4 hours ago
ISP
Herotel
Usage Type
Fixed Line ISP
ASN
AS328471
Domain Name
herotel.com
Country
🇿🇦 South Africa
City
Benoni, Gauteng
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
24 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 5 🇩🇪 Germany 2 🇷🇺 Russian Federation 1
Most common categories Bad Web Bot 5 Brute-Force 2 Hacking 2 Port Scan 2 Web App Attack 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
Anonymous
Hacking Bad Web Bot
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web Spam
Anonymous
denied traffic to a honeypot network. destination port 22.
Port Scan Hacking
🇺🇸 RAP
2026-10-02 13:01:58 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇺🇸 rjdefrancisco
Unwanted traffic detected by honeypot on August 20, 2026: port scans (1 port 23 scan and 1 port 22 scan).
Port Scan Brute-Force SSH
Anonymous
SSH brute-force: 6 blocked connection attempts to port 22 between 2026-08-20 08:50 and 2026-08-20 08:50 UTC (OPNsense firewall log).
Brute-Force SSH
Anonymous
Web attack
Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack Hacking Exploited Host
🇨🇦 polycoda
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
🇮🇹 VHosting
Detected attack and reported by a human
DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇩🇪 SMARTNET
Aisuru(Mirai variant) DDoS
DDoS Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 187.212.13.248
🇨🇭 172.161.40.129
🇧🇷 172.71.234.46
🇮🇩 160.19.179.5
🇸🇪 83.254.172.36
🇦🇺 159.13.55.134
🇪🇸 158.158.0.37
🇨🇳 123.178.210.55
🇰🇷 121.168.4.107
🇨🇳 111.23.55.175
🇮🇳 103.207.9.246
🇷🇺 92.255.190.69
🇩🇪 88.218.47.63
🇸🇪 83.226.56.106
🇸🇪 83.209.248.110
🇵🇱 83.168.110.67
🇸🇬 58.182.58.128
🇩🇪 194.88.98.88
🇺🇸 173.211.51.245
🇫🇷 169.58.80.127
feedback