# 102.64.37.246 — IP Intelligence Summary 102.64.37.246 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-37-246.megasurf.co.za. As of October 26, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/102.64.37.246 - Last updated: 2026-10-26 ## Ownership - Organization: Jacobus De Beer - Network name: 102.64.37.0 - 102.64.37.255 - Allocated block: 102.64.37.0/24 - ASN: AS327991 (https://ipdebrief.com/asn/327991) - Regional registry: AFRINIC ## Location - City: Vanderbijlpark - Region: Gauteng - Country: South Africa - Time zone: Africa/Johannesburg ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: High Risk (80/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - ms-37-246.megasurf.co.za - Forward-confirmed: yes ## Analyst narrative \# IPDEBRIEF INTELLIGENCE BRIEFING **IP Address:** 102.64.37.246/32 **Classification:** LOW RISK **Generated:** July 2026 \--- \## EXECUTIVE SUMMARY IP address 102.64.37.246 is classified as LOW RISK with an overall risk score of 30. The asset is associated with Jacobus De Beer (ASN 327991) and operates within the 102.64.37.0/24 subnet in Vanderbijlpark, Gauteng, South Africa. The IP is currently firewalled with no active services detected, and shows no evidence of malicious activity or known threat campaigns. \--- \## RISK ASSESSMENT | Metric | Value | Assessment | |--------|-------|------------| | **Overall Risk Score** | 30 | LOW | | **Abuse Confidence** | N/A | Not flagged | | **Blacklist Status** | 2 of 8 lists | Minimal | | **Provider/Authority Score** | 0 | Low operator involvement | | **Known Attacker** | False | N/A | | **Spam Source** | False | N/A | **Risk Breakdown:** The primary risk factor is minimal operator involvement (score 0) and classification within a subnet that has 3 threat siblings out of 82 total. The IP itself shows no active threat indicators. \--- \## OWNERSHIP & GEOLOCATION \- **Organization:** Jacobus De Beer \- **ASN:** 327991 \- **Network:** 102.64.37.0 - 102.64.37.255 (/24) \- **RIR:** AFRINIC \- **Location:** Vanderbijlpark, Gauteng, South Africa (ZA) \- **Timezone:** Africa/Johannesburg \- **GeoAccuracy:** 800km radius \--- \## NETWORK ROLE & SERVICES \- **Status:** Firewalled / No Services \- **Open Ports:** None detected \- **TLS Certificate:** None \- **HTTP Title:** None \- **Server Banner:** None \- **Provider/CDN/VPN Status:** All negative \--- \## DNS & EMAIL REPUTATION \- **PTR Hostname:** ms-37-246.megasurf.co.za \- **Forward Resolution:** Confirmed \- **SPF Record:** Present \- **DMARC Record:** Present \- **Hosted Domains:** 0 \--- \## THREAT INTELLIGENCE \- **Known Campaigns:** None \- **Tor Exit Node:** No \- **Known Attacker:** No \- **Spam Source:** No \- **Blacklist Count:** 0 \- **Threat Feeds:** None \- **Persistently Malicious:** No \--- \## SUBNET ANALYSIS (102.64.37.0/24) | Metric | Value | |--------|-------| | **Total Siblings** | 82 | | **Active Siblings** | 26 | | **Threat Siblings** | 3 | | **Abuse Density** | 0.0366 | | **Classification** | Clean | | **Risk Distribution** | High: 0, Medium: 40, Low: 30 | **Notable Neighbors:** \- 102.64.37.1: Risk Score 25 \- 102.64.37.14: Risk Score 15 \- 102.64.37.13, 21, 23: Risk Score 0 \--- \## OBSERVATION HISTORY (16 Observations) Recent observations indicate stable characteristics: \- **Subnet Classification:** Consistently "clean" \- **Abuse Density:** 0.0366 (stable) \- **Ownership Changes:** 0 \- **Threat Persistence:** 0 days \- **Last Observed:** 2026-07-18 No escalation in risk behavior detected over the observation period. \--- \## RELATIONSHIP GRAPH | Relationship Type | Target | |-------------------|--------| | DNS Association | ms-37-246.megasurf.co.za | | Same Network | 102.64.37.0 - 102.64.37.255 | \--- \## CONTROL PLANE DATA \- **Origin ASN:** 327991 \- **BGP Prefix:** 102.64.32.0/21 \- **Route Stability:** Unstable \- **Route Changes (30d):** 0 \- **RPKI State:** N/A \- **IRRC Consistency:** N/A \- **DNSSEC Valid:** Yes \- **DNSBL Listed:** 2 of 8 total lists \--- \## RECOMMENDED ACTIONS **Firewall Rules:** \- No blocking recommended at this time \- Monitor for service activation if previously blocked **SOC Recommendations:** \- Maintain current allow/deny policies based on existing rules \- No immediate action required \- Include in monitoring for subnet-level activity **Threat Intelligence:** \- Low-priority asset for threat monitoring \- No correlation with active threat campaigns \- No certificate matches or banner matches detected \--- \## CONCLUSION IP 102.64.37.246 presents minimal security risk. The asset is properly configured with SPF and DMARC records, shows no active threat indicators, and operates within a subnet with low abuse density. No immediate defensive actions are required. Continue standard monitoring practices. \--- **Classification:** UNCLASSIFIED **Distribution:** SOC Teams, Security Operations **Valid Until:** Next intelligence refresh ## Nearby addresses - 102.64.37.1 (https://ipdebrief.com/102.64.37.1) - 102.64.37.3 (https://ipdebrief.com/102.64.37.3) - 102.64.37.4 (https://ipdebrief.com/102.64.37.4) - 102.64.37.5 (https://ipdebrief.com/102.64.37.5) - 102.64.37.6 (https://ipdebrief.com/102.64.37.6) - 102.64.37.8 (https://ipdebrief.com/102.64.37.8) - 102.64.37.13 (https://ipdebrief.com/102.64.37.13) - 102.64.37.14 (https://ipdebrief.com/102.64.37.14) - 102.64.37.15 (https://ipdebrief.com/102.64.37.15) - 102.64.37.21 (https://ipdebrief.com/102.64.37.21) - 102.64.37.23 (https://ipdebrief.com/102.64.37.23) - 102.64.37.24 (https://ipdebrief.com/102.64.37.24) --- Source: IPDebrief, "102.64.37.246 IP intelligence", https://ipdebrief.com/102.64.37.246, updated 2026-10-26. Assessments are probabilistic.