102.129.53.190

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
8% Caution
47 reports
30 reporters · latest 1 month ago
ISP
Megasurf Wireless Internet CC
Usage Type
Fixed Line ISP
ASN
AS327991
Domain Name
megasurf.co.za
Country
🇿🇦 South Africa
City
Vereeniging, Gauteng
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
47 from 30 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇦🇺 Australia 1 🇺🇾 Uruguay 1
Most common categories Brute-Force 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇺 AWW-Admin
(imapd) Failed IMAP login from 102.129.53.190 (ms-53-190.megasurf.co.za)
Brute-Force
Anonymous
Authentication failure
Brute-Force
🇺🇸 TAY
Brute-Force
🇮🇩 sockominfo
Hacking Web App Attack
🇩🇪 ksol-hostmaster
Aug 25 06:52:33 ksol dovecot[75015]: auth-worker(26700): conn unix:auth-worker (uid=143): auth-worker<5>: sql(anonymized@email,102.129.53.190,<d9Hu3tdZu8pmgTW+>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ...
Brute-Force
🇪🇸 elcruzado.es
(imapd) Failed IMAP login from 102.129.53.190 (ms-53-190.megasurf.co.za)
Brute-Force
🇩🇪 Hagen Schoebel
Blocked by CrowdSec - crowdsecurity/dovecot-spam (ZA)
Port Scan Brute-Force Web App Attack SSH
🇬🇧 D3monite
Attempted Brute Force (dovecot)
Brute-Force
🇷🇺 DZBOT
DZBOT: [MTA] NO LOGIN / auth failed
Port Scan Brute-Force
🇿🇦 hostsec_za
IMAP/POP3 Auth Attack. 13 failed logins in 6 hours.
Brute-Force
🇺🇸 entangled_mongoose
Failed SMTP authentication with username 'user_sha_3a3dc@domain_sha_70fc2'.
Brute-Force Email Spam
🇮🇩 sockominfo
Hacking Web App Attack
🇮🇩 sockominfo
Zimbra: Login failures from malicious IP: 102.129.53.190. Threat Score: 5.9/10 (MEDIUM). Reported by TangerangKota-CSIRT
Hacking Web App Attack
🇮🇩 sockominfo
Zimbra: Login failures from malicious IP: 102.129.53.190. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT
Hacking Web App Attack
Anonymous
Authentication failure
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇭 209.99.190.186
🇺🇸 195.184.76.206
🇲🇽 187.190.35.163
🇰🇷 123.212.9.122
🇺🇸 100.29.192.122
🇰🇷 43.155.140.157
🇺🇸 195.184.76.205
🇫🇷 194.99.24.39
🇺🇸 192.0.82.238
🇩🇪 157.90.244.86
🇺🇸 152.32.208.9
🇨🇳 120.48.33.69
🇮🇳 117.213.130.184
🇮🇳 103.159.35.94
🇳🇵 103.89.157.25
🇸🇬 101.32.240.127
🇳🇱 77.239.124.65
🇳🇱 45.148.10.157
🇺🇸 18.145.191.34
🇵🇰 203.128.10.201
feedback