JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.129.53.252

Activity Trending Down

Abuse Confidence Score

16% Caution

28 reports

15 reporters · latest 1 week ago

ISP: Megasurf Wireless Internet CC
Usage Type: Fixed Line ISP
ASN: AS327991
Hostname(s): ms-53-252.megasurf.co.za
Domain Name: megasurf.co.za
Country: 🇿🇦 South Africa
City: Vereeniging, Gauteng

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

28 from 15 distinct reporters

First reported

November 23rd 2025

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇧🇷 Brazil 1 🇩🇪 Germany 1 🇺🇾 Uruguay 1

Most common categories Brute-Force 3 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-03 07:04:24 UTC · (1 week ago)	102.129.53.252 detected on srv01	Brute-Force
🇧🇷 ICS Labs	2026-10-24 00:03:58 UTC · (3 weeks ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-24 UTC.	Brute-Force Exploited Host
Anonymous	2026-10-23 04:41:08 UTC · (3 weeks ago)	Authentication failure	Brute-Force
🇨🇿 interconnect.cz	2026-08-27 05:43:23 UTC · (2 months ago)	[27/Aug/2026 07:43:05] IMAP: Authentication failed for user [email protected]. Attempt from IP address 102.129.53.252. External authentication service rejected authentication due to invalid password or authentication restriction. [27/Aug/2026 07: ... show more [27/Aug/2026 07:43:05] IMAP: Authentication failed for user [email protected]. Attempt from IP address 102.129.53.252. External authentication service rejected authentication due to invalid password or authentication restriction. [27/Aug/2026 07:43:15] IMAP: Authentication failed for user [email protected]. Attempt from IP address 102.129.53.252. External authentication service rejected authentication due to invalid password or authentication restriction. [27/Aug/2026 07:43:23] IMAP: Authentication failed for user [email protected]. Attempt from IP address 102.129.53.252. External authentication service rejected authentication due to invalid password or authentication restriction. ... show less	Brute-Force Email Spam
🇮🇩 sockominfo	2026-08-19 17:00:56 UTC · (2 months ago)	Zimbra: Login failures from malicious IP: 102.129.53.252. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and ... show more Zimbra: Login failures from malicious IP: 102.129.53.252. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-19 14:00:53 UTC · (2 months ago)	Zimbra: Login failures from malicious IP: 102.129.53.252. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and ... show more Zimbra: Login failures from malicious IP: 102.129.53.252. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-19 13:00:53 UTC · (2 months ago)	Zimbra: Login failures from malicious IP: 102.129.53.252. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and ... show more Zimbra: Login failures from malicious IP: 102.129.53.252. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-19 12:00:09 UTC · (2 months ago)	Zimbra: Login failures from malicious IP: 102.129.53.252. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack
Anonymous	2026-08-19 09:27:26 UTC · (2 months ago)	Authentication failure	Brute-Force
🇷🇸 Smel	2026-08-16 10:04:02 UTC · (2 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇷🇸 Smel	2026-06-09 10:04:02 UTC · (5 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇩🇪 it-ngo.com	2026-06-09 03:28:23 UTC · (5 months ago)	RdpGuard detected brute-force attempt on POP3	Brute-Force
🇺🇸 interbiznw.com	2026-05-29 17:34:56 UTC · (5 months ago)	dovecot-bruteforce	Port Scan Hacking Spoofing Brute-Force Exploited Host
Anonymous	2026-05-29 08:46:01 UTC · (5 months ago)	Authentication failure	Brute-Force
🇺🇸 entangled_mongoose	2026-05-01 01:44:03 UTC · (6 months ago)	Failed SMTP authentication with username 'user_sha_06648@domain_sha_70fc2'.	Brute-Force Email Spam

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 188.240.59.57

🇹🇼 125.227.194.27

🇳🇱 89.21.67.163

🇫🇮 80.223.176.145

🇧🇬 79.124.58.110

🇳🇱 35.214.233.71

🇳🇱 35.214.208.208

🇳🇱 35.214.178.37

🇳🇱 35.214.133.72

🇳🇱 5.182.209.126

🇿🇦 196.15.156.71

🇷🇴 193.32.162.15

🇲🇽 189.146.36.255

🇨🇳 183.222.174.168

🇺🇦 176.98.71.204

🇰🇷 169.211.232.182

🇭🇰 123.58.210.247

🇺🇸 72.219.215.40

🇺🇸 72.215.46.230

🇺🇸 72.215.46.212