102.64.36.107📋 Copy

IP Intelligence Briefing: 102.64.36.107

Date: June 2026

---

**1. Core Profile**

• Risk Rating: Moderate (40/100)
• Ownership: Registered to Jacobus De Beer (Megasurf Wireless Internet CC, South Africa).
• Geolocation: Vanderbijlpark, South Africa (ZA).
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP activity).
• Threat Indicators: No malicious activity detected (no abuse confidence scores, no blacklist entries).
• ISP Context: Part of Megasurf Wireless Internet CC (AS327991), a South African ISP.

---

**2. Observation History**

• Recent Signals (Last 6 Months):

- DNSSEC validation confirmed (valid).

- Geolocation consistency with South Africa.

- No scan activity or malware distribution indicators.

• Risk Trends: Stable low-risk profile; no spikes in malicious behavior.

---

**3. Relationships & Network Context**

• DNS Associations:

- Linked to ms-36-107.megasurf.co.za (PTR record).

- No suspicious domains or email auth anomalies.

• Subnet: Part of 102.64.36.0/24.
• Neighbor Analysis:

- 56 IPs in subnet (48 medium-risk, 4 low-risk, 0 high-risk).

- Abuse Density: 0.0571 (mostly clean).

- Notable Neighbors:

- 102.64.36.6, 102.64.36.8, 102.64.36.10 (medium risk).

---

**4. Threat & Mitigation Context**

• No Immediate Threat:

- No known attacker, spam, or Tor exit node associations.

- DNSBL listings: 2 out of 8 (low impact).

• Recommendations:

- Monitor subnet for unusual activity due to moderate neighbor risk.

- No firewall rules or actions required for this IP.

---

**5. Summary**

The IP 102.64.36.107 is a residential / business IP registered to a South African ISP. It shows no malicious indicators, but its subnet contains a mix of medium-risk neighbors. No immediate action is required, but continued monitoring of the subnet is advised.

SOC Action: No blocking needed. Focus on subnet-level anomaly detection.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.