102.129.56.167
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Megasurf Wireless Internet CC
- Usage Type
- Fixed Line ISP
- ASN
- AS327991
- Domain Name
- megasurf.co.za
- Country
- 🇿🇦 South Africa
- City
- Vereeniging, Gauteng
Abuse Reports
Total reports
50 from
33 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 Jova |
Repeated failed IMAP logins to a mail account (credential guessing).
|
Brute-Force | |
| 🇩🇪 it-ngo.com |
RdpGuard detected brute-force attempt on POP3
|
Brute-Force | |
| Anonymous |
Authentication failure
|
Brute-Force | |
| Anonymous |
fail2ban: brute-force/credential spraying against mail (IMAP/POP/webmail) — rmnet.it
|
Brute-Force | |
| 🇬🇧 D3monite |
Attempted Brute Force (dovecot)
|
Brute-Force | |
| 🇩🇪 FeG Deutschland |
Mail: - login with unknown user - bruteforce
|
Brute-Force | |
| 🇿🇦 hostsec_za |
IMAP/POP3 Auth Attack. 13 failed logins in 6 hours.
|
Brute-Force | |
| 🇮🇩 sockominfo |
|
Hacking Web App Attack | |
| 🇮🇩 sockominfo |
|
Hacking Web App Attack | |
| 🇮🇩 sockominfo |
Zimbra: Login failures from malicious IP: 102.129.56.167. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT
|
Hacking Web App Attack | |
| 🇺🇸 entangled_mongoose |
Failed SMTP authentication with username 'user_sha_51d46@domain_sha_70fc2'.
|
Brute-Force Email Spam | |
| 🇫🇷 iroco.co |
Jul 29 09:53:29 iroco cyrus/imap[1218107]: badlogin: ms-56-167.megasurf.co.za [102.129.56.167] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed]
...
|
Email Spam | |
| 🇬🇧 Shepley |
RdpGuard detected brute-force attempt on IMAP
|
Brute-Force | |
| 🇨🇦 Julio Covolato |
Imap or Submission login brute-force attacks.
|
Brute-Force | |
| 🇩🇪 ksol-hostmaster |
Jul 29 05:38:58 ksol dovecot[89954]: auth-worker(72172): conn unix:auth-worker (uid=143): auth-worker<2>: sql(anonymized@email,102.129.56.167,<O7oTsrdX46lmgTin>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD)
...
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown