IP intelligence

102.129.61.55

Vanderbijlpark, South Africa · Megasurf Wireless Internet CC · Residential

Own this IP? Request a review

90/100

Fraud score

critical risk

What we know about 102.129.61.55.

VPN

Clean

Proxy

Clean

Tor

Clean

Relay

Clean

Datacenter

Clean

Mobile

Clean

Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. SMTP and mail server abuse including spam relay and credential harvesting. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation

Network

Organization
Megasurf Wireless Internet CC
ISP
Megasurf Wireless Internet CC
Connection type
Residential
Cloud provider
–
Residential proxy
No
Shared connection
No

Location

Country
South Africa (ZA)
Region
Gauteng
City
Vanderbijlpark
Coordinates
-26.7005, 27.8179
Timezone
Africa/Johannesburg
rDNS
–
Hostname
ms-61-55.megasurf.co.za
Company
Use for wireless and FTTH clients PPPOE assignment
Company type
business
Network
102.129.61.0 - 102.129.61.255

History

First seen
May 12, 2026
Last seen
Nov 2, 2026
Times seen
497

Registry and abuse

Netname
Megasurf-Wireless
Status
ASSIGNED PA
Allocated
2018-11-09

Threat signatures · 6

c2_serverbotnet_nodemail_abuseserver_abusemulti_source_abusemulti_source_blacklist

Subnet (/24)

IPs observed
233
Abusive
233
Abuse ratio
100%

No reports on 102.129.61.55 yet.

Nobody has reported 102.129.61.55 yet. If it attacked you, be the first: every report feeds the free, open database that everyone can use.

102.129.61.55, answered.

No. 102.129.61.55 does not match any VPN, proxy, or Tor signature in our data. It looks like a residential or business connection.

FFraud scores 102.129.61.55 at 90/100 (critical risk) because Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. SMTP and mail server abuse including spam relay and credential harvesting. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.

102.129.61.55 is operated by Megasurf Wireless Internet CC (AS327991), located in Vanderbijlpark, South Africa.

The score reflects high-confidence signals: Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. SMTP and mail server abuse including spam relay and credential harvesting. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.

Check another IP. One at a time, instantly.

102.129.61.55: fraud score 90 of 100, Critical

102.129.61.55

Megasurf Wireless Internet CC · South Africa

Critical

90/100

Fraud score

  • VPN: no
  • Proxy: no
  • Tor: no
  • Datacenter: no
Live from the FFraud APIFull report