102.129.60.238
# IPDEBRIEF INTELLIGENCE BRIEFING
Target IP: 102.129.60.238/32
Classification: Low Risk
Date: 2026-07-30
Analyst: IPDebrief SOC Team
---
## Executive Summary
The target IP 102.129.60.238 is classified as Low Risk with a risk score of 30/100. The IP is associated with network 102.129.60.0/24 owned by Jacobus De Beer (ASN: 327991) in Vanderbijlpark, Gauteng, South Africa. The IP shows no active threat indicators, no open services, and no known malicious associations.
---
## Network Profile
| Attribute | Value |
|---|---|
| **IP Address** | 102.129.60.238 |
| **Risk Score** | 30 (Low Risk) |
| **ASN** | 327991 |
| **Organization** | Jacobus De Beer |
| **Country** | South Africa (ZA) |
| **City** | Vanderbijlpark, Gauteng |
| **Network Block** | 102.129.60.0/24 |
| **Geolocation** | Latitude: -26.7, Longitude: 27.82 |
---
## DNS & Service Analysis
- PTR Record: ms-60-238.megasurf.co.za
- Forward Resolution: Confirmed (1 hostname)
- Open Ports: None detected
- Service Purpose: Firewalled / No Services
- TLS Certificate: None
- Email Auth: SPF present, DMARC present
---
## Threat Assessment
- Is Tor Exit Node: No
- Is Known Attacker: No
- Is Spam Source: No
- Blacklist Status: Listed on 2 of 8 DNSBLs (max severity: medium)
- Threat Indicators: None detected
- Known Campaigns: None associated
---
## Neighborhood Analysis (102.129.60.0/24)
| Metric | Value |
|---|---|
| **Total Subnet IPs** | 108 |
| **Active Siblings** | 38 |
| **Threat Siblings** | 13 |
| **Abuse Density** | 12.04% |
| **Classification** | Mostly Clean |
| **Inherited Risk** | 4 |
High-Risk Neighbors Detected:
- 102.129.60.1 (Risk: 55, Authority: 60)
- 102.129.60.7 (Risk: 55, Authority: 60)
- 102.129.60.10 (Risk: 30, Authority: 60)
---
## Historical Observations
12 observations recorded. Recent activity shows:
- Geolocation: Consistent South Africa attribution
- DNS Listings: 2 DNSBL listings (medium severity)
- Operator Score: 0.2609 (Basic classification)
- Route Stability: Not stable (route changes detected)
- Persistence: No persistent malicious behavior observed
---
## Relationship Graph
- Network: 102.129.60.0 - 102.129.60.255
- DNS Hostname: ms-60-238.megasurf.co.za
---
## Recommended Actions
No immediate blocking actions recommended. The IP is classified as low risk with no active threat indicators. However, the subnet shows elevated abuse density (12.04%) with 13 threat-sibling IPs. SOC teams should monitor related IPs in the 102.129.60.0/24 range for correlation.
Action Priority: Monitor
Firewall Rule Required: No
Additional Context: Review DNSBL listings if traffic patterns indicate suspicious activity.
---
*Report generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Jacobus De Beer |
| ASN | AS327991 |
| Network Name | 102.129.60.0 - 102.129.60.255 |
| CIDR Block | 102.129.60.0/24 |
| RIR | AFRINIC |
| Country | ZA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | ms-60-238.megasurf.co.za |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ms-60-238.megasurf.co.za |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 1 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-28 04:02:09 UTC |
| Last Seen | 2026-07-30 14:53:25 UTC |
| Profile Built | 2026-07-30 15:08:29 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 20 |
Full dossier details are available via our API.