JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.66.183.74

102.66.183.74 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 27%: ?

27%

ISP	Herotel
Usage Type	Fixed Line ISP
ASN	AS328471
Domain Name	herotel.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.66.183.74

Whois 102.66.183.74

IP Abuse Reports for 102.66.183.74:

This IP address has been reported a total of 17 times from 12 distinct sources. 102.66.183.74 was first reported on December 10th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-13 15:05:38 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 102.66.183.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 102.66.183.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 11:05:32.384453 2026] [security2:error] [pid 29786:tid 29786] [client 102.66.183.74:9564] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|josephshv.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "josephshv.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as5IvN5cvpvW7oOF855lagAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-25 01:24:34 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 13:52:40 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
Anonymous	2026-09-21 18:32:03 (3 weeks ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
🇺🇸 鬼影233	2026-09-17 18:07:46 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 00:54:37 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A311&f%5B1%5D=digest_key_terms%3A315&f%5B2%5D=digest_key_terms%3A327&f%5B3%5D=digest_key_terms%3A519&f%5B4%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B358%5D=358 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-06 20:08:58 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 RAP	2026-09-02 06:40:16 (1 month ago)	2026-09-02 06:40:16 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 m2jest1c	2026-09-02 06:12:44 (1 month ago)	2026-09-02T02:12:43.487297 rhel-20gb-ash-1 sshd[2392396]: error: kex_exchange_identification: Connec ... show more 2026-09-02T02:12:43.487297 rhel-20gb-ash-1 sshd[2392396]: error: kex_exchange_identification: Connection closed by remote host 2026-09-02T02:12:43.487329 rhel-20gb-ash-1 sshd[2392396]: Connection closed by 102.66.183.74 port 64076 ... show less	Brute-Force SSH
🇺🇸 kosada.com	2026-08-16 05:58:55 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-08-15 11:05:09 (2 months ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇩🇪 grassau.com	2026-08-10 13:48:13 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 102.66.183.74 (ZA/So ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 102.66.183.74 (ZA/South Africa/Gauteng/Brakpan/-) show less	Bad Web Bot
🇵🇱 bmino.pl	2026-07-30 18:54:16 (2 months ago)	Autoban IP(2): 102.66.183.74 - Hostname: Herotel - City: Matsulu - Region: Mpumalanga - Country: Sou ... show more Autoban IP(2): 102.66.183.74 - Hostname: Herotel - City: Matsulu - Region: Mpumalanga - Country: South Africa - Location: - Organization: AS328471 HERO TELECOMS (PTY) LTD - failed attempts. show less	Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 8969aafa-3f20-493f-8883-3bda65a2b909	DDoS Attack
🇨🇦 polycoda	2026-03-22 12:08:31 (6 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 136.67.0.209

🇷🇴 80.94.92.73

🇰🇷 59.13.125.157

🇺🇸 45.79.214.23

🇧🇩 37.111.214.100

🇪🇸 2a0c:5a86:f608:1700:38a2:ef9:c940:78d1

🇸🇬 165.22.51.61

🇨🇿 80.82.156.184

🇧🇩 45.250.228.208

🇷🇴 2.57.121.25

🇻🇳 171.224.65.224

🇸🇬 165.22.254.227

🇿🇦 102.129.56.200

🇵🇱 78.31.146.220

🇱🇹 62.60.130.253

🇲🇾 47.250.119.77

🇹🇼 35.229.197.177

🇶🇦 34.18.7.174

🇵🇱 193.8.187.13

🇷🇺 176.196.177.180