# 102.129.52.141 — IP Intelligence Summary

102.129.52.141 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-52-141.megasurf.co.za. As of November 1, 2026, IPDebrief rates it Moderate Risk (65/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/102.129.52.141
- Last updated: 2026-11-01

## Ownership

- Organization: Jacobus De Beer
- Network name: 102.129.52.0 - 102.129.52.255
- Allocated block: 102.129.52.0/24
- ASN: AS327991 (https://ipdebrief.com/asn/327991)
- Regional registry: AFRINIC

## Location

- City: Vanderbijlpark
- Region: Gauteng
- Country: South Africa
- Time zone: Africa/Johannesburg

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (65/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ms-52-141.megasurf.co.za
- Forward-confirmed: yes

## Analyst narrative

\# IP Intelligence Briefing: 102.129.52.141/32

\## Executive Summary

IP address 102.129.52.141 is a low-risk residential endpoint located in Vanderbijlpark, South Africa. The IP belongs to Jacobus De Beer under ASN 327991 (Megasurf Wireless Internet CC) and presents minimal threat indicators. No active services or malicious behavior detected.

\## Technical Profile

**Ownership & Classification:**

\- ASN: 327991

\- Organization: Jacobus De Beer

\- Network Range: 102.129.52.0 - 102.129.52.255 (/24)

\- RIR: Afrinic

\- Classification: Residential/Consumer endpoint

**Geolocation:**

\- Country: South Africa (ZA)

\- Region: Gauteng

\- City: Vanderbijlpark

\- Timezone: Africa/Johannesburg

**Network Characteristics:**

\- Status: Firewalled / No Services detected

\- Open Ports: None

\- DNS PTR: ms-52-141.megasurf.co.za

\- Forward Resolution: Confirmed

\- DNSBL Status: Listed on 1 of 8 checks

**Threat Indicators:**

\- Risk Score: 25 (Low Risk)

\- Abuse Confidence Score: Not applicable

\- Known Attacker: No

\- Tor Exit Node: No

\- Spam Source: No

\- Blacklist Count: 0

\- Campaign Associations: None identified

\## Neighborhood Analysis

The /24 subnet (102.129.52.0/24) contains 100 sibling IPs with a moderate abuse density of 0.03 (3%). Risk distribution across the subnet:

\- High Risk: 3 IPs

\- Medium Risk: 61 IPs

\- Low Risk: 29 IPs

Notable high-risk neighbors include 102.129.52.8 (risk score 55) and 102.129.52.2 (risk score 40), suggesting elevated activity in specific segments of the address block.

\## Relationship Graph

**DNS Associations:**

\- ms-52-141.megasurf.co.za (Primary hostname)

**Network Affiliation:**

\- 102.129.52.0 - 102.129.52.255 (Same network)

\## Historical Observations

Thirteen observations recorded as of 2026-07-28:

\- **Geolocation:** Consistent reporting of Vanderbijlpark, Gauteng, South Africa

\- **Provider Classification:** Megasurf Wireless Internet CC identified with residential proxy classification

\- **Risk Trends:** Stable with no significant escalation observed

\- **Threat Persistence:** Zero days of observed malicious activity

\## Recommended Actions

Based on the low-risk profile and absence of active services:

1. **Monitoring:** Standard logging and monitoring recommended for residential consumer IP

2. **Blocking:** No immediate blocking required

3. **Rate Limiting:** Consider standard residential IP rate limiting policies

4. **Investigation Priority:** Low – no active threat indicators or malicious behavior observed

\## Threat Assessment

**Overall Risk: LOW**

The IP represents a standard residential consumer endpoint with no active threat indicators, no open services, and no campaign associations. The low risk score of 25 and zero blacklist hits support normal traffic flow. While the subnet shows some elevated activity (3 high-risk neighbors), this IP specifically demonstrates benign characteristics consistent with residential usage patterns.

**Recommended Handling:** Permit with standard logging. No firewall rules required at this time.

## Nearby addresses

- 102.129.52.1 (https://ipdebrief.com/102.129.52.1)
- 102.129.52.2 (https://ipdebrief.com/102.129.52.2)
- 102.129.52.5 (https://ipdebrief.com/102.129.52.5)
- 102.129.52.6 (https://ipdebrief.com/102.129.52.6)
- 102.129.52.8 (https://ipdebrief.com/102.129.52.8)
- 102.129.52.9 (https://ipdebrief.com/102.129.52.9)
- 102.129.52.10 (https://ipdebrief.com/102.129.52.10)
- 102.129.52.11 (https://ipdebrief.com/102.129.52.11)
- 102.129.52.16 (https://ipdebrief.com/102.129.52.16)
- 102.129.52.18 (https://ipdebrief.com/102.129.52.18)
- 102.129.52.19 (https://ipdebrief.com/102.129.52.19)
- 102.129.52.21 (https://ipdebrief.com/102.129.52.21)

---

Source: IPDebrief, "102.129.52.141 IP intelligence", https://ipdebrief.com/102.129.52.141, updated 2026-11-01. Assessments are probabilistic.