# 102.64.37.109 — IP Intelligence Summary

102.64.37.109 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-37-109.megasurf.co.za. As of November 6, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/102.64.37.109
- Last updated: 2026-11-06

## Ownership

- Organization: Jacobus De Beer
- Network name: 102.64.37.0 - 102.64.37.255
- Allocated block: 102.64.37.0/24
- ASN: AS327991 (https://ipdebrief.com/asn/327991)
- Regional registry: AFRINIC

## Location

- City: Vanderbijlpark
- Region: Gauteng
- Country: South Africa
- Time zone: Africa/Johannesburg

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (55/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ms-37-109.megasurf.co.za
- Forward-confirmed: yes

## Analyst narrative

\# INTELLIGENCE BRIEFING: IP 102.64.37.109/32

**Classification:** Defensive Security Assessment | **Date:** Current | **Status:** Low Risk

\---

\## Executive Summary

IP 102.64.37.109 presents a low-risk profile with a reputation score of 15. The address is owned by Jacobus De Beer (ASN: 327991) and is registered within the 102.64.37.0/24 block in South Africa. No active threat indicators, campaigns, or malicious activity have been detected. The IP is currently firewalled with no open services detected.

\---

\## Ownership & Network Classification

| Attribute | Value |

|-----------|-------|

| **Organization** | Jacobus De Beer |

| **ASN** | 327991 |

| **CIDR Block** | 102.64.37.0/24 |

| **RIR** | AFRINIC |

| **Geolocation** | Delmas, Gauteng, South Africa (ZA) |

| **Timezone** | Africa/Johannesburg |

| **Network Role** | Firewalled / No Services |

| **Infrastructure Type** | Not Cloud, CDN, VPN, Proxy, or Hosting |

\---

\## Threat Assessment

\### Risk Indicators

\- **Risk Score:** 15 (Low Risk)

\- **Abuse Confidence Score:** Not applicable

\- **Blacklist Count:** 0

\- **DNSBL Listings:** 1 of 8 total lists

\- **Known Campaigns:** None

\- **Tor Exit Node:** False

\- **Known Attacker:** False

\- **Spam Source:** False

\### Threat Persistence

\- **Ownership Changes:** 0

\- **Threat Observation Count:** 0

\- **Is Persistently Malicious:** False

\---

\## DNS & Email Infrastructure

| Component | Status |

|-----------|--------|

| **PTR Hostname** | ms-37-109.megasurf.co.za |

| **Forward Resolution** | Confirmed (1 hostname) |

| **SPF Record** | Present |

| **DMARC Record** | Present |

| **TXT Record Count** | 0 |

| **Forward Hostnames** | ms-37-109.megasurf.co.za |

\---

\## Neighborhood Analysis (102.64.37.0/24)

The /24 subnet contains 89 total sibling IPs with 36 currently active.

| Metric | Value |

|--------|-------|

| **Abuse Density** | 0.0674 (Low) |

| **Classification** | Mostly Clean |

| **Inherited Risk** | 2 |

| **Threat Siblings** | 6 |

| **High-Risk Siblings** | 1 |

| **Medium-Risk Siblings** | 59 |

| **Low-Risk Siblings** | 16 |

**Notable High-Risk Neighbor:** 102.64.37.21 (Risk Score: 70, Authority Score: 60)

\---

\## Control Plane Data

\- **Origin ASN:** 327991

\- **BGP Prefix:** 102.64.32.0/21

\- **Route Stability:** False

\- **DNSSEC Valid:** True

\- **Operator Score:** 0.2609 (Basic)

\---

\## Observation History

Fifteen observations recorded. Recent signals include:

\- **Geolocation:** Consistent South Africa (ZA) attribution with varying city data (Delmas, Vanderbijlpark)

\- **Network Classification:** "mostly_clean" with low abuse density (0.0674)

\- **Risk Indicators:** No emerging threat signals detected

\---

\## Recommended Security Actions

No specific firewall rules or security actions are recommended at this time. The IP presents a low-risk profile with no active threat indicators.

\---

\## Analyst Notes

This IP address should be treated as benign for defensive security operations. The single DNSBL listing and low inherited risk score do not warrant blocking under standard policies. However, security operations center teams should remain aware of the high-risk sibling IP 102.64.37.21 within the same /24 subnet, which may warrant additional monitoring or investigation depending on organizational threat tolerance.

**Action Required:** None. Continue standard monitoring.

## Nearby addresses

- 102.64.37.1 (https://ipdebrief.com/102.64.37.1)
- 102.64.37.3 (https://ipdebrief.com/102.64.37.3)
- 102.64.37.4 (https://ipdebrief.com/102.64.37.4)
- 102.64.37.5 (https://ipdebrief.com/102.64.37.5)
- 102.64.37.6 (https://ipdebrief.com/102.64.37.6)
- 102.64.37.8 (https://ipdebrief.com/102.64.37.8)
- 102.64.37.13 (https://ipdebrief.com/102.64.37.13)
- 102.64.37.14 (https://ipdebrief.com/102.64.37.14)
- 102.64.37.15 (https://ipdebrief.com/102.64.37.15)
- 102.64.37.21 (https://ipdebrief.com/102.64.37.21)
- 102.64.37.23 (https://ipdebrief.com/102.64.37.23)
- 102.64.37.24 (https://ipdebrief.com/102.64.37.24)

---

Source: IPDebrief, "102.64.37.109 IP intelligence", https://ipdebrief.com/102.64.37.109, updated 2026-11-06. Assessments are probabilistic.