# 102.129.63.177 — IP Intelligence Summary

102.129.63.177 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-63-177.megasurf.co.za. As of October 9, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/102.129.63.177
- Last updated: 2026-10-09

## Ownership

- Organization: Jacobus De Beer
- Network name: 102.129.63.0 - 102.129.63.255
- Allocated block: 102.129.63.0/24
- ASN: AS327991 (https://ipdebrief.com/asn/327991)
- Regional registry: AFRINIC

## Location

- City: Vanderbijlpark
- Region: Gauteng
- Country: South Africa
- Time zone: Africa/Johannesburg

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (80/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ms-63-177.megasurf.co.za
- Forward-confirmed: yes

## Analyst narrative

\## IP Intelligence Briefing: 102.129.63.177

**Classification:** Low Risk — Legitimate Infrastructure (Firewalled)

**Date:** 2026-07-19

**Risk Score:** 30/100

\### Executive Summary

IP address 102.129.63.177 is a low-risk (30/100) residential or small business endpoint located in Vanderbijlpark, South Africa. The IP resolves to a legitimate South African service provider (Jacobus De Beer) and is currently firewalled with no open services. No active malicious indicators or threat signatures were detected. No immediate defensive action is required.

\### Infrastructure Profile

| Field | Value |

|-------|-------|

| **IP Address** | 102.129.63.177/32 |

| **ASN** | AS327991 (Jacobus De Beer) |

| **Network** | 102.129.63.0/24 |

| **Country** | South Africa (ZA) |

| **City** | Vanderbijlpark, GP |

| **RIR** | AFRINIC |

| **PTR Hostname** | ms-63-177.megasurf.co.za |

| **Registration** | Unavailable |

\### Threat Indicators

\- **Abuse Confidence:** Not assessed (null)

\- **Blacklist Status:** 2 of 8 DNSBLs (not significant)

\- **Tor Exit:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Campaign Correlation:** None detected

\- **Certificate Matches:** 0

\### Network Context

**Subnet Analysis (102.129.63.0/24):**

\- **Total Siblings:** 90

\- **Abuse Density:** 1.1%

\- **Risk Distribution:** 1 high (55), 50 medium, 17 low

\- **Notable Neighbor:** 102.129.63.1 (risk: 55, authority: 60)

**Control Plane:**

\- **BGP Prefix:** 102.129.56.0/21

\- **Route Stability:** Unstable (0 changes in 30 days)

\- **DNSSEC:** Valid

\- **Operator Score:** 0.2609 (Basic)

\### Behavioral Analysis

\- **Open Ports:** None (firewalled)

\- **Services:** No active HTTP/HTTPS

\- **TLS Certificates:** None

\- **Honeypot Hits:** 0

\- **Enumeration Strikes:** 0

\- **Threat Persistence:** 0 days

\- **Ownership Changes:** 0

\### Historical Signals (17 observations)

Recent activity (2026-07-19):

\- Ownership data confirmed (Jacobus De Beer)

\- Geolocation consistent: South Africa (confidence: 52-95%)

\- Network classification: Not CDN, not Cloud, not Hosting, not Mobile

\- Threat signals present but not associated with active campaigns

\### DNS Analysis

\- **Forward Resolution:** ms-63-177.megasurf.co.za (confirmed)

\- **Reverse Resolution:** ms-63-177.megasurf.co.za (confirmed)

\- **SPF Record:** Present

\- **DMARC Record:** Present

\- **Hosted Domains:** 0

\### Network Traceroute

\- **Total Hops:** 30

\- **First Hop RTT:** 0.1ms

\- **Last Hop RTT:** 254.1ms

\- **Timed Out Hops:** 3

\- **Transit Networks:** Comcast

\### Recommended Actions

**Current Risk Level:** Low — No Immediate Action Required

The IP exhibits characteristics of legitimate residential or small business infrastructure with proper DNS configuration and no active threat indicators. Monitor for:

\- Emergence of open services/ports

\- Blacklist additions

\- Correlation with known threat campaigns

**Firewall Policy:** Permissive (default) — No blocking recommended based on current profile.

\---

*Intel generated from IPDebrief platform. Validated against 17 historical observations and 90 neighboring IPs in same /24 subnet.*

## Nearby addresses

- 102.129.63.1 (https://ipdebrief.com/102.129.63.1)
- 102.129.63.2 (https://ipdebrief.com/102.129.63.2)
- 102.129.63.3 (https://ipdebrief.com/102.129.63.3)
- 102.129.63.4 (https://ipdebrief.com/102.129.63.4)
- 102.129.63.9 (https://ipdebrief.com/102.129.63.9)
- 102.129.63.10 (https://ipdebrief.com/102.129.63.10)
- 102.129.63.11 (https://ipdebrief.com/102.129.63.11)
- 102.129.63.12 (https://ipdebrief.com/102.129.63.12)
- 102.129.63.13 (https://ipdebrief.com/102.129.63.13)
- 102.129.63.15 (https://ipdebrief.com/102.129.63.15)
- 102.129.63.16 (https://ipdebrief.com/102.129.63.16)
- 102.129.63.19 (https://ipdebrief.com/102.129.63.19)

---

Source: IPDebrief, "102.129.63.177 IP intelligence", https://ipdebrief.com/102.129.63.177, updated 2026-10-09. Assessments are probabilistic.