# 102.64.39.45 — IP Intelligence Summary

102.64.39.45 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-39-45.megasurf.co.za. As of November 1, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/102.64.39.45
- Last updated: 2026-11-01

## Ownership

- Organization: Jacobus De Beer
- Network name: 102.64.39.0 - 102.64.39.255
- Allocated block: 102.64.39.0/24
- ASN: AS327991 (https://ipdebrief.com/asn/327991)
- Regional registry: AFRINIC

## Location

- City: Vanderbijlpark
- Region: Gauteng
- Country: South Africa
- Time zone: Africa/Johannesburg

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (80/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ms-39-45.megasurf.co.za
- Forward-confirmed: yes

## Analyst narrative

\# IP Intelligence Briefing: 102.64.39.45/32

\## Executive Summary

The target IP 102.64.39.45 presents a **moderate risk profile** with a risk score of 40. The address is associated with Jacobus De Beer (ASN 327991) and is geolocated to Vanderbijlpark, Gauteng, South Africa. The IP resolves to megasurf.co.za infrastructure and is currently firewalled with no open services detected.

\## Technical Profile

**Ownership & Network:**

\- ASN: 327991 (Jacobus De Beer)

\- Block: 102.64.39.0/24

\- RIR: AfriNIC

\- Registration Date: 2016-03-22 (3,779 days old)

\- BGP Prefix: 102.64.32.0/21

\- Route Stability: Unstable (1 route change in last 30 days)

**Geolocation:**

\- Country: South Africa (ZA)

\- Region: Gauteng

\- City: Vanderbijlpark

\- Geo Consensus: True

\- Accuracy: 800km radius

**DNS & Hostname Resolution:**

\- PTR Hostname: ms-39-45.megasurf.co.za

\- Forward Resolution: ms-39-45.megasurf.co.za (confirmed)

\- Email Authentication: SPF and DMARC records present

**Network Services:**

\- Open Ports: None detected

\- Service Classification: Firewalled / No Services

\- Is Cloud/CDN/VPN/Proxy/Tor: No

\- TLS Certificates: None detected

\## Threat Indicators

\- **Blacklist Status:** 0 blacklists

\- **DNSBL Listings:** 2 of 8 total DNSBL lists

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Abuse Confidence Score:** Not available

\- **Campaign Association:** None identified

\- **Threat Persistence:** Not persistently malicious

\## Neighborhood Analysis (102.64.39.0/24)

\- **Total Siblings:** 81

\- **Abuse Density:** 1.2%

\- **Risk Distribution:**

\- High Risk: 1 IP

\- Medium Risk: 53 IPs

\- Low Risk: 23 IPs

\- **Notable High-Risk Neighbors:** 102.64.39.14 (score 40), 102.64.39.15 (score 40)

\## Historical Observation

\- **Total Observations:** 18

\- **Latest Activity:** 2026-07-27

\- **Ownership Changes:** 0

\- **Threat Observation Count:** 0

\- **Route Changes (30d):** 1

\- **Persistence Days:** 0

\## Relationships

\- **DNS Associations:** ms-39-45.megasurf.co.za (multiple records)

\- **Network Relationships:** 102.64.39.0 - 102.64.39.255

\## Recommended Actions

Based on the moderate risk profile and DNSBL listings, the following actions are recommended:

1. **Monitor Closely:** The IP is associated with megasurf.co.za infrastructure. Monitor for any changes in service status or threat indicators.

2. **Evaluate DNSBL Listings:** Investigate the 2 DNSBL listings to determine the nature of the listings.

3. **Subnet Context:** The /24 subnet shows elevated abuse density (1.2%) with 53 medium-risk neighbors. Consider subnet-level monitoring.

4. **Route Stability:** The unstable routing (1 change in 30 days) may indicate infrastructure churn; monitor for potential abuse migration.

\## Conclusion

IP 102.64.39.45 is a residential/business IP under Jacobus De Beer ownership with moderate risk characteristics. Current evidence indicates the address is properly configured with email authentication records and no active service exposure. The 2 DNSBL listings warrant investigation but do not indicate immediate malicious activity. The subnet's elevated abuse density suggests the broader network block may require additional scrutiny. No immediate blocking is recommended; continued monitoring is advised.

## Nearby addresses

- 102.64.39.7 (https://ipdebrief.com/102.64.39.7)
- 102.64.39.9 (https://ipdebrief.com/102.64.39.9)
- 102.64.39.10 (https://ipdebrief.com/102.64.39.10)
- 102.64.39.12 (https://ipdebrief.com/102.64.39.12)
- 102.64.39.14 (https://ipdebrief.com/102.64.39.14)
- 102.64.39.15 (https://ipdebrief.com/102.64.39.15)
- 102.64.39.20 (https://ipdebrief.com/102.64.39.20)
- 102.64.39.21 (https://ipdebrief.com/102.64.39.21)
- 102.64.39.23 (https://ipdebrief.com/102.64.39.23)
- 102.64.39.24 (https://ipdebrief.com/102.64.39.24)
- 102.64.39.31 (https://ipdebrief.com/102.64.39.31)
- 102.64.39.32 (https://ipdebrief.com/102.64.39.32)

---

Source: IPDebrief, "102.64.39.45 IP intelligence", https://ipdebrief.com/102.64.39.45, updated 2026-11-01. Assessments are probabilistic.