JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.64.41.229

102.64.41.229 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 42%: ?

42%

ISP	Megasurf Wireless Internet CC
Usage Type	Fixed Line ISP
ASN	AS327991
Hostname(s)	ms-41-229.megasurf.co.za
Domain Name	megasurf.co.za
Country	🇿🇦 South Africa
City	Vereeniging, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.64.41.229

Whois 102.64.41.229

IP Abuse Reports for 102.64.41.229:

This IP address has been reported a total of 35 times from 25 distinct sources. 102.64.41.229 was first reported on May 28th 2021, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇦 iphezimbra	2026-09-01 01:07:54 (13 hours ago)	Fail2Ban reported IP from jail zimbra-web on <hostname>	Brute-Force SSH
🇫🇷 iroco.co	2026-08-26 10:07:13 (6 days ago)	Aug 26 12:07:12 iroco cyrus/imap[1926997]: badlogin: ms-41-229.megasurf.co.za [102.64.41.229] plaint ... show more Aug 26 12:07:12 iroco cyrus/imap[1926997]: badlogin: ms-41-229.megasurf.co.za [102.64.41.229] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Email Spam
Anonymous	2026-08-26 04:04:22 (6 days ago)	Authentication failure	Brute-Force
🇺🇸 TAY	2026-08-25 18:17:47 (6 days ago)	2026-08-26 02:17:27 auth-worker(342441): Info: sql(juliaaaxjoy,102.64.41.229,<H65wHeNZVKdmQCnl>): un ... show more 2026-08-26 02:17:27 auth-worker(342441): Info: sql(juliaaaxjoy,102.64.41.229,<H65wHeNZVKdmQCnl>): unknown user 2026-08-26 02:17:35 auth-worker(342441): Info: sql(juliaaaxjoy,102.64.41.229,<H65wHeNZVKdmQCnl>): unknown user 2026-08-26 02:17:41 auth-worker(342441): Info: sql(juliaaaxjoy,102.64.41.229,<H65wHeNZVKdmQCnl>): unknown user 2026-08-26 02:17:46 imap-login: Info: Disconnected (auth failed, 3 attempts in 20 secs): user=<juliaaaxjoy>, method=PLAIN, rip=102.64.41.229, lip=162.220.160.187, TLS, session=<H65wHeNZVKdmQCnl> ... show less	Brute-Force
🇿🇦 hostsec_za	2026-08-24 22:35:02 (1 week ago)	IMAP/POP3 Auth Attack. 13 failed logins in 6 hours.	Brute-Force
🇩🇪 ksol-hostmaster	2026-08-24 21:58:50 (1 week ago)	Aug 24 23:58:48 ksol dovecot[75015]: auth-worker(13711): conn unix:auth-worker (uid=143): auth-worke ... show more Aug 24 23:58:48 ksol dovecot[75015]: auth-worker(13711): conn unix:auth-worker (uid=143): auth-worker<8>: sql(anonymized@email,102.64.41.229,<0tNAF9JZ15hmQCnl>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-08-20 23:54:01 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇩 sockominfo	2026-07-10 10:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 102.64.41.229. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.64.41.229. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-10 09:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 102.64.41.229. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.64.41.229. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-10 08:00:09 (1 month ago)	Zimbra: Login failures from malicious IP: 102.64.41.229. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 102.64.41.229. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇦🇹 AustrianSimon	2026-07-04 06:22:41 (1 month ago)	04 Jul 2026 06:22:41UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 04 Jul 2026 06:22:41UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 102.64.41.229 show less	Brute-Force
Anonymous	2026-06-24 19:49:19 (2 months ago)	Authentication failure	Brute-Force
🇩🇪 FeG Deutschland	2026-05-21 11:46:02 (3 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇪🇸 alferez	2026-04-22 19:59:01 (4 months ago)	Searching random mail account login	Email Spam
🇺🇸 entangled_mongoose	2026-03-30 13:09:42 (5 months ago)	Failed SMTP authentication with username 'user_sha_6c14e@domain_sha_70fc2'.	Brute-Force Email Spam

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 172.253.249.213

🇻🇳 103.163.118.115

🇳🇬 102.88.137.80

🇺🇸 64.225.114.197

🇱🇹 62.60.130.253

🇺🇸 35.231.247.180

🇺🇸 34.26.119.202

🇺🇸 20.14.92.229

🇲🇽 216.28.132.0

🇵🇱 212.182.58.37

🇧🇷 200.239.146.253

🇬🇧 178.128.168.137

🇺🇸 154.19.231.86

🇬🇧 147.12.193.89

🇱🇹 141.98.9.92

🇺🇸 136.116.165.165

🇺🇸 98.80.77.204

🇺🇸 66.132.186.212

🇺🇸 45.61.188.238

🇳🇬 41.207.248.234