JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.129.52.248

Activity Trending Down

Abuse Confidence Score

17% Caution

46 reports

26 reporters · latest 1 month ago

ISP: Megasurf Wireless Internet CC
Usage Type: Fixed Line ISP
ASN: AS327991
Domain Name: megasurf.co.za
Country: 🇿🇦 South Africa
City: Vereeniging, Gauteng

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

46 from 26 distinct reporters

First reported

September 11th 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇮🇩 Indonesia 3 🇫🇷 France 1 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1

Most common categories Brute-Force 4 Web App Attack 3 Hacking 3 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-06 13:57:20 UTC · (1 month ago)	Authentication failure	Brute-Force
🇮🇹 Progetto1	2026-10-05 02:21:02 UTC · (1 month ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇬🇧 D3monite	2026-09-30 04:01:55 UTC · (1 month ago)	Attempted Brute Force (dovecot)	Brute-Force
🇮🇩 sockominfo	2026-09-28 01:00:53 UTC · (1 month ago)	Email: Login failures from Bad Reputation IP: 102.129.52.248. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phish ... show more Email: Login failures from Bad Reputation IP: 102.129.52.248. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-28 00:00:52 UTC · (1 month ago)	Email: Login failures from Bad Reputation IP: 102.129.52.248. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phish ... show more Email: Login failures from Bad Reputation IP: 102.129.52.248. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-27 23:00:09 UTC · (1 month ago)	Email: Login failures from Bad Reputation IP: 102.129.52.248. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack
🇫🇷 solution.it	2026-09-27 21:58:19 UTC · (1 month ago)	Sep 27 23:58:18 vps789997 dovecot: imap-login: Disconnected (auth failed, 2 attempts in 13 secs): user=<4be3df5c.4020703>, method=PLAIN, rip=102.129.52.248, lip=51.77.194.251, TLS, session=<QAdOC35chIdmgTT4>	Brute-Force
🇸🇰 Schomburg	2026-09-11 00:46:23 UTC · (2 months ago)	Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: 963AqXbl5Vxzs182ZWFmCD2cSQwbPtrD	Port Scan Hacking Brute-Force
🇩🇪 FeG Deutschland	2026-08-15 18:16:02 UTC · (2 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 jasperedv.de	2026-08-15 17:29:45 UTC · (2 months ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
Anonymous	2026-08-12 14:03:48 UTC · (3 months ago)	2026-08-12T15:03:47.714375+01:00 [masked] dovecot[1870051]: imap-login: Login aborted: Connection closed (auth failed, 3 attempts in 25 secs) (auth_failed): user=<oreillynet.com>, method=PLAIN, rip=102.129.52.248, lip=192.168.1.160, TLS, session=<ib2 ... show more 2026-08-12T15:03:47.714375+01:00 [masked] dovecot[1870051]: imap-login: Login aborted: Connection closed (auth failed, 3 attempts in 25 secs) (auth_failed): user=<oreillynet.com>, method=PLAIN, rip=102.129.52.248, lip=192.168.1.160, TLS, session=<ib22DNpYQJBmgTT4> ... show less	Brute-Force
🇮🇩 sockominfo	2026-08-09 00:00:53 UTC · (3 months ago)	Zimbra: Login failures from malicious IP: 102.129.52.248. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and ... show more Zimbra: Login failures from malicious IP: 102.129.52.248. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-08 23:00:09 UTC · (3 months ago)	Zimbra: Login failures from malicious IP: 102.129.52.248. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack
🇦🇺 AWW-Admin	2026-08-04 05:00:06 UTC · (3 months ago)	(imapd) Failed IMAP login from 102.129.52.248 (ms-52-248.megasurf.co.za)	Brute-Force
🇮🇩 sockominfo	2026-07-30 10:00:54 UTC · (3 months ago)	Zimbra: Login failures from malicious IP: 102.129.52.248. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 72%. MITRE ATT&CK: T1083 (File and ... show more Zimbra: Login failures from malicious IP: 102.129.52.248. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 72%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇿 213.230.86.127

🇵🇦 194.165.16.122

🇮🇹 188.241.67.63

🇩🇪 185.220.101.158

🇨🇱 179.60.84.162

🇺🇸 172.105.147.126

🇻🇳 157.66.49.124

🇵🇰 115.42.70.26

🇫🇷 62.210.114.99

🇺🇸 50.36.233.15

🇨🇭 104.244.78.42

🇮🇳 103.24.20.221

🇬🇧 95.146.219.20

🇳🇱 77.67.26.54

🇰🇷 13.209.164.77

🇺🇸 216.26.226.47

🇳🇱 212.30.37.56

🇺🇸 209.50.172.98

🇧🇩 202.40.180.106

🇫🇷 169.40.142.144