# 102.129.55.44 — IP Intelligence Summary 102.129.55.44 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-55-44.megasurf.co.za. As of October 6, 2026, IPDebrief rates it Low Risk (15/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/102.129.55.44 - Last updated: 2026-10-06 ## Ownership - Organization: Jacobus De Beer - Network name: 102.129.55.0 - 102.129.55.255 - Allocated block: 102.129.55.0/24 - ASN: AS327991 (https://ipdebrief.com/asn/327991) - Regional registry: AFRINIC ## Location - City: Vanderbijlpark - Region: Gauteng - Country: South Africa - Time zone: Africa/Johannesburg ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (15/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - ms-55-44.megasurf.co.za - Forward-confirmed: yes ## Analyst narrative \# IP Intelligence Briefing: 102.129.55.44/32 \## Executive Summary **Classification:** Moderate Risk (Score: 40) **Location:** Vanderbijlpark, Gauteng, South Africa (ZA) **ASN:** 327991 | Organization: Jacobus De Beer | Block: 102.129.55.0/24 **Status:** Multi-Service Host with active web and SSH services \## Risk Assessment The IP maintains a moderate risk score of 40/100. No active threat indicators detected—no known attacker flags, spam source designation, or Tor exit node classification. Blacklist status shows 2 DNSBL listings out of 8 total lists evaluated. The IP is not persistently malicious with zero threat observation count and no campaign correlations. \## Network Characteristics \- **Service Profile:** HTTP (port 80/tcp) and SSH (port 22/tcp) services active \- **SSH Banner:** SSH-2.0-ROSSSH (identified SSH server variant) \- **DNS Resolution:** Forward confirmed to ms-55-44.megasurf.co.za (co.za TLD) \- **Email Authentication:** SPF and DMARC records present \- **Network Classification:** Not cloud, CDN, VPN, proxy, hosting, mobile, residential, or bogon \## Subnet Analysis (102.129.55.0/24) \- **Total Active Siblings:** 99 \- **Risk Distribution:** High (0), Medium (49), Low (22) \- **Abuse Density:** 0 \- **Threat Siblings:** 0 \- **Inherited Risk:** 0 The subnet exhibits moderate activity with nearly half of active peers classified as medium risk. The target IP does not inherit elevated risk from neighbors. \## Control Plane Indicators \- **BGP Prefix:** 102.129.48.0/21 \- **Route Stability:** Unstable (route changes detected in last 30 days) \- **DNSSEC:** Valid \- **DNSBL Status:** Listed on 2 of 8 evaluated lists \- **Operator Score:** 0.2609 (Basic) \## Historical Observations 16 signal observations recorded. Latest activity captured 2026-07-18, showing consistent service availability with SSH and HTTP endpoints. No significant shifts in geolocation or ownership patterns detected. \## Recommended Actions \- Monitor SSH port 22 for unauthorized access attempts \- Review DNSBL listing origins for potential false positives \- Consider enhanced logging for incoming connections to port 80 and 22 \- Subnet-level monitoring recommended due to 49 medium-risk peers \## Intelligence Notes IP resolves to a South African residential/commercial host under Jacobus De Beer organization. The "ROSSSH" SSH banner indicates a common open-source SSH server implementation. No direct correlation to known threat actors or campaigns. ## Nearby addresses - 102.129.55.3 (https://ipdebrief.com/102.129.55.3) - 102.129.55.4 (https://ipdebrief.com/102.129.55.4) - 102.129.55.5 (https://ipdebrief.com/102.129.55.5) - 102.129.55.6 (https://ipdebrief.com/102.129.55.6) - 102.129.55.10 (https://ipdebrief.com/102.129.55.10) - 102.129.55.12 (https://ipdebrief.com/102.129.55.12) - 102.129.55.13 (https://ipdebrief.com/102.129.55.13) - 102.129.55.14 (https://ipdebrief.com/102.129.55.14) - 102.129.55.15 (https://ipdebrief.com/102.129.55.15) - 102.129.55.16 (https://ipdebrief.com/102.129.55.16) - 102.129.55.17 (https://ipdebrief.com/102.129.55.17) - 102.129.55.18 (https://ipdebrief.com/102.129.55.18) --- Source: IPDebrief, "102.129.55.44 IP intelligence", https://ipdebrief.com/102.129.55.44, updated 2026-10-06. Assessments are probabilistic.