# 102.64.33.37 — IP Intelligence Summary 102.64.33.37 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-33-37.megasurf.co.za. As of October 7, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/102.64.33.37 - Last updated: 2026-10-07 ## Ownership - Organization: Jacobus De Beer - Network name: 102.64.33.0 - 102.64.33.255 - Allocated block: 102.64.33.0/24 - ASN: AS327991 (https://ipdebrief.com/asn/327991) - Regional registry: AFRINIC ## Location - City: Vanderbijlpark - Region: GP - Country: South Africa - Time zone: Africa/Johannesburg ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Moderate Risk (55/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - ms-33-37.megasurf.co.za - Forward-confirmed: yes ## Analyst narrative \# IP Intelligence Briefing: 102.64.33.37/32 **Date:** 2026-07-27 **Analyst:** IPDebrief Intelligence Team **Classification:** Defensive Security Intelligence \--- \## Executive Summary IP address 102.64.33.37 is classified as **Low Risk** with a risk score of 15. The IP is associated with South African hosting provider Jacobus De Beer (ASN 327991) and resolves to a residential hosting endpoint (ms-33-37.megasurf.co.za). Current threat indicators show minimal malicious activity. \--- \## Network & Ownership Profile \- **ASN:** 327991 (Jacobus De Beer) \- **CIDR Block:** 102.64.33.0/24 \- **Registration:** AFRINIC (South Africa) \- **Geolocation:** Vanderbijlpark, Gauteng, South Africa \- **Classification:** Residential/Small Business Hosting \- **Network Role:** Firewalled / No Services \--- \## Threat Intelligence \- **Risk Score:** 15 (Low Risk) \- **Abuse Confidence:** Not applicable \- **Known Campaigns:** None detected \- **Threat Feeds:** No active indicators \- **Blacklist Status:** Listed on 1 of 8 DNSBL lists \- **Tor/Proxy/VPN:** Not identified \### Key Findings \- No open ports detected; services are firewalled \- DNS resolution confirmed for ms-33-37.megasurf.co.za \- No association with known attack infrastructure \- No known attacker or spam source designation \--- \## Neighborhood Analysis **Subnet:** 102.64.33.0/24 \- **Total Siblings:** 94 \- **Active Siblings:** 40 \- **Threat Siblings:** 14 \- **Abuse Density:** 0.1489 (14.9%) \- **Inherited Risk:** 5 (Low) **Risk Distribution in Subnet:** \- High Risk: 0 IPs \- Medium Risk: 68 IPs \- Low Risk: 21 IPs \--- \## Historical Observations \- **Total Signals:** 18 observations \- **Observation Period:** Recent activity from 2026-07-27 \- **Threat Persistence:** 0 days (no persistent malicious behavior) \- **Ownership Changes:** 0 \### Trend Analysis Recent observations indicate stable characteristics: \- Subnet classification consistently "mostly_clean" \- Geographic location stable (South Africa) \- No escalation in threat indicators \- Operator score stable at 0.2609 (Basic) \--- \## Relationships \- **DNS Associations:** ms-33-37.megasurf.co.za \- **Network Associations:** 102.64.33.0 - 102.64.33.255 \- **External Links:** No organization or certificate associations detected \- **Correlated IPs:** None identified \--- \## Recommended Actions \### Firewall Rules No blocking recommended based on current risk profile. However, consider: \`\`\`bash \# Allow established traffic (if required) iptables -A INPUT -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT \# No explicit block required \`\`\` \### Monitoring \- Monitor for service activation on previously firewalled IP \- Watch for DNSBL status changes \- Track subnet-level abuse density trends \### Risk Mitigation \- Subnet abuse density (14.9%) warrants periodic review \- Consider geo-based filtering if SA traffic not expected \- Monitor for any correlation with 14 threat-identified siblings \--- \## Conclusion IP 102.64.33.37 represents a low-risk residential hosting endpoint with no current malicious activity. The subnet shows moderate abuse density typical of residential hosting environments. No immediate blocking or blocking escalation is recommended. Continue standard monitoring practices. **Status:** ✅ Monitor / No Action Required **Last Updated:** 2026-07-27 ## Nearby addresses - 102.64.33.1 (https://ipdebrief.com/102.64.33.1) - 102.64.33.2 (https://ipdebrief.com/102.64.33.2) - 102.64.33.3 (https://ipdebrief.com/102.64.33.3) - 102.64.33.9 (https://ipdebrief.com/102.64.33.9) - 102.64.33.12 (https://ipdebrief.com/102.64.33.12) - 102.64.33.16 (https://ipdebrief.com/102.64.33.16) - 102.64.33.17 (https://ipdebrief.com/102.64.33.17) - 102.64.33.18 (https://ipdebrief.com/102.64.33.18) - 102.64.33.19 (https://ipdebrief.com/102.64.33.19) - 102.64.33.20 (https://ipdebrief.com/102.64.33.20) - 102.64.33.24 (https://ipdebrief.com/102.64.33.24) - 102.64.33.25 (https://ipdebrief.com/102.64.33.25) --- Source: IPDebrief, "102.64.33.37 IP intelligence", https://ipdebrief.com/102.64.33.37, updated 2026-10-07. Assessments are probabilistic.