JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.64.40.114

102.64.40.114 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 27%: ?

27%

ISP	Megasurf Wireless Internet CC
Usage Type	Fixed Line ISP
ASN	AS327991
Domain Name	megasurf.co.za
Country	🇿🇦 South Africa
City	Vereeniging, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.64.40.114

Whois 102.64.40.114

IP Abuse Reports for 102.64.40.114:

This IP address has been reported a total of 35 times from 20 distinct sources. 102.64.40.114 was first reported on August 9th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 globcom	2026-10-16 18:12:28 (5 hours ago)	Mail-Auth	Brute-Force
Anonymous	2026-10-13 11:00:07 (3 days ago)	Authentication failure	Brute-Force
🇿🇦 hostsec_za	2026-10-08 06:15:03 (1 week ago)	IMAP/POP3 Auth Attack. 26 failed logins in 24 hours.	Brute-Force
🇸🇪 maxxsense	2026-10-07 15:43:16 (1 week ago)	(imapd) Failed IMAP login from 102.64.40.114 (ms-40-114.megasurf.co.za)	Brute-Force
🇮🇩 sockominfo	2026-08-17 10:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-17 09:00:09 (1 month ago)	Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-08-17 04:37:32 (1 month ago)	Authentication failure	Brute-Force
🇮🇩 sockominfo	2026-07-26 10:00:53 (2 months ago)	Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 5.9/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 5.9/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-26 09:00:53 (2 months ago)	Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 6/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-26 08:00:53 (2 months ago)	Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 6.1/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-26 07:00:09 (2 months ago)	Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 5.9/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 5.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-07-26 06:20:22 (2 months ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇮🇩 sockominfo	2026-07-26 05:00:09 (2 months ago)	Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 102.64.40.114. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 pltcldvlpr	2026-07-25 17:31:28 (2 months ago)	Bogus Useragent: 102.64.40.114 - - [25/Jul/2026:19:31:27 +0200] "GET /protocol?id=be_19_17&paragraph ... show more Bogus Useragent: 102.64.40.114 - - [25/Jul/2026:19:31:27 +0200] "GET /protocol?id=be_19_17&paragraph=1474171&seq=809 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/3.1)" asn=327991 org="Megasurf Wireless Internet CC" country=ZA ... show less	Bad Web Bot
🇳🇱 Grad	2026-07-24 13:02:48 (2 months ago)	Jul 24 15:02:47 server dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts ... show more Jul 24 15:02:47 server dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 18 secs): user=<[email protected]>, method=PLAIN, rip=102.64.40.114, lip=188.212.112.185, TLS, session=<P5Qt/FpXwZJmQChy> ... show less	Email Spam Brute-Force

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.186

🇧🇷 205.210.31.178

🇧🇷 205.210.31.177

🇵🇱 45.138.12.24

🇵🇱 45.138.12.22

🇺🇸 34.186.27.130

🇧🇷 34.39.134.179

🇹🇼 210.61.216.167

🇧🇷 205.210.31.175

🇧🇷 205.210.31.172

🇧🇷 205.210.31.169

🇬🇧 200.138.46.205

🇳🇱 195.178.110.26

🇲🇽 187.216.224.85

🇬🇧 161.35.40.182

🇬🇧 159.65.58.214

🇮🇳 103.189.89.196

🇻🇳 42.114.200.67

🇰🇪 41.90.106.137

🇧🇷 205.210.31.167