JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.129.61.168

102.129.61.168 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 43%: ?

43%

ISP	Megasurf Wireless Internet CC
Usage Type	Fixed Line ISP
ASN	AS327991
Hostname(s)	ms-61-168.megasurf.co.za
Domain Name	megasurf.co.za
Country	🇿🇦 South Africa
City	Vereeniging, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.129.61.168

Whois 102.129.61.168

IP Abuse Reports for 102.129.61.168:

This IP address has been reported a total of 29 times from 21 distinct sources. 102.129.61.168 was first reported on November 11th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Julio Covolato	2026-08-21 07:35:01 (1 day ago)	Imap or Submission login brute-force attacks.	Brute-Force
Anonymous	2026-08-15 10:08:45 (1 week ago)	Authentication failure	Brute-Force
🇮🇩 sockominfo	2026-08-13 13:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-08-13 12:53:53 (1 week ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇮🇩 sockominfo	2026-08-13 12:00:54 (1 week ago)	Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-13 11:00:09 (1 week ago)	Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 5.6/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 5.6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-08-08 14:26:56 (2 weeks ago)	Authentication failure	Brute-Force
🇫🇷 adlp.org	2026-08-08 08:43:06 (2 weeks ago)	Aug 8 08:42:59 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;102.129.61.168;;abou ... show more Aug 8 08:42:59 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;102.129.61.168;;[email protected];imap;plain;1;@adlp.org$;10.0.10.2;143;Licence to kill Aug 8 08:43:02 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;102.129.61.168;;[email protected];imap;plain;1;@adlp.org$;10.0.10.2;143;Licence to kill Aug 8 08:43:05 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;102.129.61.168;;[email protected];imap;plain;1;@adlp.org$;10.0.10.2;143;Licence to kill ... show less	Brute-Force
🇮🇩 sockominfo	2026-08-08 06:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-08 05:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-08 04:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 6.5/10 (HIGH). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 102.129.61.168. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇷🇴 INTEQ	2026-08-07 22:34:28 (2 weeks ago)	Brute force attack from 102.129.61.168	Brute-Force
🇺🇸 kosada.com	2026-08-05 17:53:38 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 xmission.com	2026-07-14 14:54:29 (1 month ago)	Blocked by UFW (TCP on 60150) Source port: 80 TTL: 36 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 60150) Source port: 80 TTL: 36 Packet length: 40 TOS: 0x08 This report (for 102.129.61.168) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇮 basing	2026-06-30 12:22:53 (1 month ago)	2026-06-30 13:22:53 bs SASL PLAIN auth failed: rhost=102.129.61.168...	Brute-Force

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.107

🇳🇱 195.178.110.217

🇺🇸 98.172.188.232

🇺🇸 216.180.181.11

🇺🇸 205.210.31.72

🇩🇪 194.88.98.103

🇻🇪 190.97.252.47

🇫🇷 185.145.33.89

🇨🇳 182.116.88.225

🇰🇷 182.31.36.218

🇨🇴 179.32.210.109

🇺🇸 136.116.4.44

🇮🇳 103.249.82.242

🇸🇬 103.134.154.195

🇺🇸 100.29.192.99

🇳🇱 91.92.47.252

🇳🇱 77.83.39.94

🇺🇸 66.132.186.137

🇺🇸 54.90.153.106

🇺🇸 52.128.42.108