102.64.35.43📋 Copy

IP Intelligence Briefing: 102.64.35.43

Date: 2026-06-09

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Provider: Jacobus De Beer (ASN 327991, afrinic)
• Geolocation: Vanderbijlpark, Gauteng, South Africa (ZA)
• Network: 102.64.35.0/24 subnet
• Threat Indicators: No direct malicious activity detected.

---

**2. Risk Context**

• Subnet Abuse Density: 17% (moderate risk within the 102.64.35.0/24 network).
• Neighbor Analysis:

- 9 high-risk neighbors (avg. 55–80 score).

- 30 medium-risk neighbors (avg. 40–60 score).

- 12 low-risk neighbors.

• DNS Associations: Linked to `ms-35-43.megasurf.co.za` (confirmed PTR resolution).

---

**3. Historical Observations**

• Signal Trends:

- Recent DNSSEC and CAA records validated (June 2, 2026).

- No persistent threat observations (0 threat observation count).

- BGP route stability: 0 changes in 30 days.

• Anomalies: No spikes in honeypot hits or enumeration attempts.

---

**4. Network & Behavioral Insights**

• Services: No open ports or TLS certificates detected.
• Hosting: No CDN, mobile, or residential indicators.
• Routing: BGP prefix `102.64.32.0/21` with no RPKI validation issues.
• Email Reputation: No SPF/DKIM records detected for `megasurf.co.za`.

---

**5. Recommendations**

• Monitoring: Track DNS activity and subnet peers for anomalies.
• Mitigation: Consider blocking high-risk neighbors (e.g., 102.64.35.12) to reduce exposure.
• Validation: Verify DNS records (`ms-35-43.megasurf.co.za`) for potential spoofing risks.

---

Note: No direct malicious activity detected, but high-risk subnet context warrants closer scrutiny.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.