JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.64.45.126

102.64.45.126 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 48%: ?

48%

ISP	Megasurf Wireless Internet CC
Usage Type	Fixed Line ISP
ASN	AS327991
Hostname(s)	ms-45-126.megasurf.co.za
Domain Name	megasurf.co.za
Country	🇿🇦 South Africa
City	Vereeniging, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.64.45.126

Whois 102.64.45.126

IP Abuse Reports for 102.64.45.126:

This IP address has been reported a total of 50 times from 33 distinct sources. 102.64.45.126 was first reported on February 27th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 netclix.gr	2026-07-24 14:47:11 (2 days ago)	(imapd) Failed IMAP login from 102.64.45.126 (ms-45-126.megasurf.co.za)	Brute-Force
Anonymous	2026-07-24 06:06:53 (3 days ago)	2 Login Attempts	Port Scan Brute-Force
🇨🇦 Julio Covolato	2026-07-24 04:40:01 (3 days ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇮🇩 sockominfo	2026-07-24 04:00:52 (3 days ago)	Zimbra: Login failures from malicious IP: 102.64.45.126. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.64.45.126. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-24 03:00:53 (3 days ago)	Zimbra: Login failures from malicious IP: 102.64.45.126. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.64.45.126. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-24 02:00:53 (3 days ago)	Zimbra: Login failures from malicious IP: 102.64.45.126. Threat Score: 6.5/10 (HIGH). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 102.64.45.126. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 ksol-hostmaster	2026-07-23 20:49:20 (3 days ago)	Jul 23 22:49:19 ksol dovecot[2253]: auth-worker(25426): conn unix:auth-worker (uid=143): auth-worker ... show more Jul 23 22:49:19 ksol dovecot[2253]: auth-worker(25426): conn unix:auth-worker (uid=143): auth-worker<8>: sql(anonymized@email,102.64.45.126,<JuLVY01XIMFmQC1+>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
Anonymous	2026-07-23 16:33:55 (3 days ago)	Authentication failure	Brute-Force
🇬🇧 gaztronics	2026-07-15 05:19:09 (1 week ago)	2026-07-15T05:19:04.757387 liberator auth[3273306]: pam_unix(dovecot:auth): authentication failure; ... show more 2026-07-15T05:19:04.757387 liberator auth[3273306]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=102.64.45.126 ... show less	Brute-Force
🇷🇺 DZBOT	2026-06-28 05:00:17 (4 weeks ago)	DZBOT: [MTA] Brute-force users	Brute-Force
🇨🇦 Julio Covolato	2026-06-28 02:35:03 (4 weeks ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇺🇸 TheCluePhone	2026-06-06 08:21:42 (1 month ago)	2026-06-06T08:21:41.832440ip-172-30-0-137.ec2.internal auth[6479]: pam_unix(dovecot:auth): authentic ... show more 2026-06-06T08:21:41.832440ip-172-30-0-137.ec2.internal auth[6479]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=102.64.45.126 ... show less	Brute-Force Exploited Host
🇳🇱 nikki101	2026-06-01 17:54:35 (1 month ago)	pop/imap unauthorized access attempt, inappropriate conduct	Email Spam Brute-Force
🇩🇪 netclix.gr	2026-05-19 00:06:23 (2 months ago)	(imapd) Failed IMAP login from 102.64.45.126 (ZA/South Africa/ms-45-126.megasurf.co.za)	Brute-Force
🇺🇸 ras07	2026-05-15 00:30:14 (2 months ago)	Brute force SMTP/IMAP login attempts.	Brute-Force

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.153.143

🇹🇭 203.156.108.68

🇬🇷 194.63.239.144

🇦🇷 190.138.218.223

🇮🇳 139.5.1.17

🇵🇰 119.156.28.157

🇮🇩 111.94.182.101

🇧🇩 103.129.211.46

🇮🇳 103.127.170.132

🇨🇳 36.152.236.218

🇮🇳 14.195.112.74

🇮🇳 223.233.66.44

🇿🇦 196.41.207.112

🇺🇦 194.44.27.98

🇨🇳 192.140.175.185

🇻🇳 171.225.205.3

🇨🇴 152.201.230.85

🇩🇪 146.103.41.226

🇷🇴 141.98.83.48

🇺🇸 135.119.16.163