JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.129.59.225

102.129.59.225

Recent Activity

31 reports found in our database

25% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

Megasurf Wireless Internet CC

Usage Type

Fixed Line ISP

ASN

AS327991

Hostname(s)

ms-59-225.megasurf.co.za

Domain Name

megasurf.co.za

Country

🇿🇦 South Africa

City

Vereeniging, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 102.129.59.225:

This IP address has been reported a total of 31 times from 22 distinct sources. 102.129.59.225 was first reported on October 12th 2025, and the most recent report was 56 minutes ago. In the last 60 days, the top reporter locations were: Germany with 3 reports; Indonesia with 2 reports; Russian Federation with 1 report. The most common categories in these recent reports were: Brute-Force 4 times; Hacking 2 times; Web App Attack 2 times; Port Scan 1 time; Email Spam 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 tall1oN	2026-09-07 20:53:25 (56 minutes ago)	2026-09-07T22:53:15.162377+02:00 kenny dovecot: auth-worker(2307272): conn unix:auth-worker (pid=199 ... show more 2026-09-07T22:53:15.162377+02:00 kenny dovecot: auth-worker(2307272): conn unix:auth-worker (pid=1995080,uid=107): auth-worker<1>: sql([email protected],102.129.59.225,<D8+PzupagdpmgTvh>): unknown user 2026-09-07T22:53:17.410985+02:00 kenny dovecot: auth-worker(2307272): conn unix:auth-worker (pid=1995080,uid=107): auth-worker<2>: pam([email protected],102.129.59.225,<D8+PzupagdpmgTvh>): pam_authenticate() failed: Authentication failure (Password mismatch?) 2026-09-07T22:53:25.050340+02:00 kenny dovecot: auth-worker(2307272): conn unix:auth-worker (pid=1995080,uid=107): auth-worker<3>: sql([email protected],102.129.59.225,<D8+PzupagdpmgTvh>): unknown user ... show less	Brute-Force Email Spam
🇩🇪 ksol-hostmaster	2026-08-22 20:36:40 (2 weeks ago)	Aug 22 22:36:39 ksol dovecot[99639]: auth-worker(63479): conn unix:auth-worker (uid=143): auth-worke ... show more Aug 22 22:36:39 ksol dovecot[99639]: auth-worker(63479): conn unix:auth-worker (uid=143): auth-worker<6>: sql(anonymized@email,102.129.59.225,<4K3CtahZwIBmgTvh>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇮🇩 sockominfo	2026-08-14 01:00:53 (3 weeks ago)	Zimbra: Login failures from malicious IP: 102.129.59.225. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.129.59.225. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-14 00:00:59 (3 weeks ago)	Zimbra: Login failures from malicious IP: 102.129.59.225. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.129.59.225. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-08-13 12:53:23 (3 weeks ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇩🇪 FeG Deutschland	2026-07-19 14:26:03 (1 month ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 it-ngo.com	2026-07-08 23:14:44 (1 month ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force
Anonymous	2026-07-08 05:11:00 (1 month ago)	Authentication failure	Brute-Force
Anonymous	2026-07-04 22:26:34 (2 months ago)	(imapd) Failed IMAP login from 102.129.59.225 (ms-59-225.megasurf.co.za)	Brute-Force
🇺🇸 vestibtech	2026-06-28 11:23:34 (2 months ago)	2026-06-28T05:23:33.932605-06:00 Host-KLAX-C dovecot[1202]: imap-login: Disconnected: Connection clo ... show more 2026-06-28T05:23:33.932605-06:00 Host-KLAX-C dovecot[1202]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 16 secs): user=<sales>, method=PLAIN, rip=102.129.59.225, lip=185.198.26.44, TLS, session=<Vt2EkU5V/LpmgTvh> ... show less	Brute-Force
🇩🇪 jasperedv.de	2026-06-27 18:24:55 (2 months ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇷🇸 Smel	2026-06-26 07:34:05 (2 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇫🇷 bgg	2026-05-21 01:25:35 (3 months ago)	May 21 03:25:34 nanopirate dovecot: imap-login: Disconnected (auth failed, 3 attempts in 23 secs): u ... show more May 21 03:25:34 nanopirate dovecot: imap-login: Disconnected (auth failed, 3 attempts in 23 secs): user=<[email protected]>, method=PLAIN, rip=102.129.59.225, lip=195.154.107.35, TLS, session=<O06QyElSd85mgTvh> ... show less	Port Scan Brute-Force
🇨🇦 Mediashaker	2026-05-07 05:54:14 (4 months ago)	(pop3d) Failed POP3 login from 102.129.59.225 (ZA/South Africa/ms-59-225.megasurf.co.za)	Brute-Force
🇷🇴 clauss	2026-05-02 00:19:10 (4 months ago)	IP reached maximum auth failures for a one day block	Brute-Force

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.171.26.67

🇺🇸 45.61.188.240

🇳🇱 195.178.110.228

🇦🇷 190.179.226.40

🇬🇧 87.84.50.30

🇷🇴 2.57.121.25

🇺🇸 204.44.107.184

🇺🇸 195.184.76.100

🇺🇸 192.186.154.188

🇮🇳 182.95.181.26

🇿🇦 165.73.91.206

🇺🇸 161.123.99.1

🇺🇸 151.244.45.3

🇺🇸 128.121.165.8

🇫🇷 85.217.140.9

🇸🇬 43.173.160.11

🇵🇹 14.102.29.232

🇧🇷 200.149.35.107

🇷🇴 193.32.162.84

🇧🇷 186.248.197.77