JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.129.52.167

Recent Activity

Abuse Confidence Score

28% Elevated

48 reports

24 reporters · latest 4 days ago

ISP: Megasurf Wireless Internet CC
Usage Type: Fixed Line ISP
ASN: AS327991
Domain Name: megasurf.co.za
Country: 🇿🇦 South Africa
City: Vereeniging, Gauteng

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

48 from 24 distinct reporters

First reported

December 31st 2021

Most recent report

4 days ago

Last 60 days

Top reporter locations 🇨🇦 Canada 2 🇩🇪 Germany 2 🇺🇸 United States of America 2

Most common categories Brute-Force 7 Bad Web Bot 2 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Mediashaker	2026-11-10 17:47:42 UTC · (4 days ago)	(pop3d) Failed POP3 login from 102.129.52.167 (ZA/South Africa/ms-52-167.megasurf.co.za)	Brute-Force
🇩🇪 yitzhaq	2026-10-12 21:54:11 UTC · (1 month ago)	Oct 12 23:53:55 [host] vpopmail[1465390]: vchkpw-imaps: vpopmail user not found [email]:102.129.52.167 Oct 12 23:54:02 [host] vpopmail[1465837]: vchkpw-imaps: vpopmail user not found [email]:102.129.52.167 Oct 12 23:54:08 [host] vpopmail[1466269]: vc ... show more Oct 12 23:53:55 [host] vpopmail[1465390]: vchkpw-imaps: vpopmail user not found [email]:102.129.52.167 Oct 12 23:54:02 [host] vpopmail[1465837]: vchkpw-imaps: vpopmail user not found [email]:102.129.52.167 Oct 12 23:54:08 [host] vpopmail[1466269]: vchkpw-imaps: vpopmail user not found [email]:102.129.52.167 show less	Brute-Force
Anonymous	2026-10-12 21:36:02 UTC · (1 month ago)	Repeated inbound connection attempts blocked by firewall. Observed at least twice within 24 hours.	Hacking
🇬🇧 D3monite	2026-10-12 21:03:42 UTC · (1 month ago)	Attempted Brute Force (dovecot)	Brute-Force
🇨🇦 Mediashaker	2026-10-12 18:13:44 UTC · (1 month ago)	(pop3d) Failed POP3 login from 102.129.52.167 (ms-52-167.megasurf.co.za)	Brute-Force
Anonymous	2026-10-04 14:13:20 UTC · (1 month ago)	fail2ban: brute-force/credential spraying against mail (IMAP/POP/webmail) — rmnet.it	Brute-Force
Anonymous	2026-10-04 11:48:07 UTC · (1 month ago)	Authentication failure	Brute-Force
Anonymous	2026-09-30 22:16:27 UTC · (1 month ago)	2026-10-01T00:16:26.928858+02:00 soli-gate cyrus/imaps[3760536]: badlogin: ms-52-167.megasurf.co.za [102.129.52.167] PLAIN ([email protected]) [SASL(-13): authentication failure: Password verification failed] ...	Brute-Force
🇺🇸 鬼影233	2026-09-24 12:09:32 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 10:08:07 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇩🇪 DyhnenTv	2026-09-09 09:16:25 UTC · (2 months ago)	CrowdSec mailserver: crowdsecurity/dovecot-spam	Brute-Force Email Spam
🇮🇩 sockominfo	2026-09-06 22:00:57 UTC · (2 months ago)	Email: Login failures from Bad Reputation IP: 102.129.52.167. Threat Score: 5.9/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phish ... show more Email: Login failures from Bad Reputation IP: 102.129.52.167. Threat Score: 5.9/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-06 21:00:53 UTC · (2 months ago)	Email: Login failures from Bad Reputation IP: 102.129.52.167. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishin ... show more Email: Login failures from Bad Reputation IP: 102.129.52.167. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-06 20:01:02 UTC · (2 months ago)	Email: Login failures from Bad Reputation IP: 102.129.52.167. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phish ... show more Email: Login failures from Bad Reputation IP: 102.129.52.167. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-06 19:00:09 UTC · (2 months ago)	Email: Login failures from Bad Reputation IP: 102.129.52.167. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 172.64.200.88

🇺🇸 167.172.116.5

🇨🇦 167.100.66.179

🇺🇸 104.22.102.64

🇺🇸 50.117.36.207

🇸🇬 47.82.11.60

🇬🇧 45.131.216.250

🇹🇼 35.221.138.107

🇵🇱 172.64.200.113

🇸🇬 47.82.55.48

🇩🇿 197.117.89.222

🇸🇬 190.106.177.116

🇵🇱 172.64.198.94

🇻🇳 171.244.40.247

🇻🇳 157.66.26.248

🇺🇸 155.229.99.163

🇸🇬 85.198.38.38

🇧🇬 78.128.114.174

🇧🇬 78.128.112.74

🇫🇮 45.82.110.150