JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.66.187.144

102.66.187.144 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 34%: ?

34%

ISP	Herotel
Usage Type	Fixed Line ISP
ASN	AS328471
Domain Name	herotel.com
Country	🇿🇦 South Africa
City	Klerksdorp, North West

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.66.187.144

Whois 102.66.187.144

IP Abuse Reports for 102.66.187.144:

This IP address has been reported a total of 17 times from 9 distinct sources. 102.66.187.144 was first reported on August 28th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-27 01:12:38 (2 hours ago)	(mod_security) mod_security (id:210350) triggered by 102.66.187.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 102.66.187.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 21:12:31.773205 2026] [security2:error] [pid 6661:tid 6661] [client 102.66.187.144:35640] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|xcarsubscription.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "xcarsubscription.com"] [uri "/"] [unique_id "at_6f-6C7vKVaX-Wu3jWPAAAABI"], referer: https://investorsfundingusa.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-10-12 11:26:17 (2 weeks ago)	Port Scan Attack proto:TCP src:41078 dst:23	Port Scan
Anonymous	2026-10-12 09:54:12 (2 weeks ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇺🇸 TPI-Abuse	2026-10-03 16:45:17 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 102.66.187.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 102.66.187.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 12:45:11.828237 2026] [security2:error] [pid 2662:tid 2662] [client 102.66.187.144:53076] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jiramp.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jiramp.com"] [uri "/"] [unique_id "asExF5EwBthJc4thEkel4wAAAAc"], referer: https://onlinebacklinkcreator.site/dir/link-outreach-services-107089 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-26 18:20:05 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 09:13:29 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 14:34:50 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 14:24:36 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 09:49:58 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-10 18:57:07 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-31 09:26:06 (1 month ago)	Tried our host z.	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-08-30 07:25:34 (1 month ago)	tcp/22 (4 or more attempts)	Port Scan
Anonymous	2026-08-30 05:18:57 (1 month ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇺🇸 thororen	2026-08-30 00:05:19 (1 month ago)	Blocked by UFW [23/tcp] Source port: 47198 TTL: 46 Packet length: 60 TOS: 0x00 This report was gene ... show more Blocked by UFW [23/tcp] Source port: 47198 TTL: 46 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-08-29 05:34:18 (1 month ago)	tcp/23	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 180.242.149.165

🇻🇳 171.244.39.95

🇺🇸 162.216.150.170

🇺🇸 157.245.251.136

🇵🇪 138.186.76.22

🇸🇬 97.74.87.152

🇫🇷 91.231.89.11

🇷🇺 81.211.72.167

🇺🇸 70.37.89.177

🇺🇸 43.166.208.50

🇯🇵 34.97.80.200

🇺🇸 8.229.106.1

🇺🇸 2001:470:1:fb5::1f5

🇹🇷 212.252.117.21

🇲🇲 210.14.97.244

🇧🇪 207.175.235.138

🇬🇧 195.206.182.201

🇧🇷 191.177.175.50

🇳🇱 185.242.226.103

🇦🇷 181.99.106.60