JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.64.41.159

102.64.41.159 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 43%: ?

43%

ISP	Megasurf Wireless Internet CC
Usage Type	Fixed Line ISP
ASN	AS327991
Hostname(s)	ms-41-159.megasurf.co.za
Domain Name	megasurf.co.za
Country	🇿🇦 South Africa
City	Vereeniging, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.64.41.159

Whois 102.64.41.159

IP Abuse Reports for 102.64.41.159:

This IP address has been reported a total of 37 times from 20 distinct sources. 102.64.41.159 was first reported on November 2nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-07-28 09:04:05 (1 day ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇫🇷 smtp.com.es	2026-07-28 02:57:35 (1 day ago)	Brute force attempt.	Brute-Force Email Spam
🇮🇩 sockominfo	2026-07-27 21:00:53 (1 day ago)	Zimbra: Login failures from malicious IP: 102.64.41.159. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.64.41.159. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-27 20:00:08 (1 day ago)	Zimbra: Login failures from malicious IP: 102.64.41.159. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 102.64.41.159. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇨🇦 Mediashaker	2026-07-18 17:45:24 (1 week ago)	(pop3d) Failed POP3 login from 102.64.41.159 (ms-41-159.megasurf.co.za)	Brute-Force
🇮🇩 sockominfo	2026-07-08 03:00:53 (3 weeks ago)	Zimbra: Login failures from malicious IP: 102.64.41.159. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.64.41.159. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-08 02:00:52 (3 weeks ago)	Zimbra: Login failures from malicious IP: 102.64.41.159. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.64.41.159. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
Anonymous	2026-07-08 00:06:53 (3 weeks ago)	Authentication failure	Brute-Force
Anonymous	2026-06-30 20:18:23 (4 weeks ago)	2026-06-30 20:18:22 warning[7727888]: host [102.64.41.159]: unauthorized access attempted: ... show more 2026-06-30 20:18:22 warning[7727888]: host [102.64.41.159]: unauthorized access attempted: / show less	Port Scan Brute-Force
🇩🇪 netclix.gr	2026-06-26 02:15:41 (1 month ago)	(imapd) Failed IMAP login from 102.64.41.159 (ms-41-159.megasurf.co.za)	Brute-Force
🇬🇧 D3monite	2026-06-23 18:59:47 (1 month ago)	Attempted Brute Force (dovecot)	Brute-Force
Anonymous	2026-06-23 16:53:33 (1 month ago)	2026-06-23T18:53:32.983916+02:00 soli-gate cyrus/imaps[189607]: badlogin: ms-41-159.megasurf.co.za [ ... show more 2026-06-23T18:53:32.983916+02:00 soli-gate cyrus/imaps[189607]: badlogin: ms-41-159.megasurf.co.za [102.64.41.159] plaintext (no-reply) [SASL(-13): authentication failure: checkpass failed] ... show less	Brute-Force
🇷🇸 Smel	2026-06-03 05:34:02 (1 month ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇷🇴 gtheo99	2026-06-02 22:10:09 (1 month ago)	(imapd) Failed IMAP login from 102.64.41.159 (ZA/South Africa/ms-41-159.megasurf.co.za): 3 in the la ... show more (imapd) Failed IMAP login from 102.64.41.159 (ZA/South Africa/ms-41-159.megasurf.co.za): 3 in the last 900 secs show less	Brute-Force Email Spam
Anonymous	2026-05-17 20:18:21 (2 months ago)	2026-05-17 20:18:21 warning[2984207]: host [102.64.41.159]: unauthorized access attempted: ... show more 2026-05-17 20:18:21 warning[2984207]: host [102.64.41.159]: unauthorized access attempted: / show less	Port Scan Brute-Force

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.137

🇺🇸 184.168.31.238

🇺🇸 172.217.107.151

🇭🇰 165.154.225.47

🇳🇱 160.119.71.121

🇩🇿 129.45.73.155

🇮🇳 116.73.143.84

🇨🇳 115.191.33.55

🇨🇴 103.219.169.214

🇦🇪 94.202.9.59

🇷🇴 92.118.39.49

🇺🇸 71.6.233.159

🇳🇱 45.148.10.157

🇳🇱 45.148.10.141

🇿🇦 4.221.162.168

🇮🇳 209.182.232.150

🇺🇸 204.10.161.77

🇦🇷 200.123.53.240

🇬🇧 185.200.118.46

🇱🇹 185.169.4.185