102.64.41.138
102.64.41.138 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-41-138.megasurf.co.za. As of October 7, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected.
# IP Threat Intelligence Briefing
IP Address: 102.64.41.138/32
Date: Current Analysis
Classification: Low Risk
---
## Executive Summary
IP 102.64.41.138 presents a low-risk profile with an overall risk score of 15. The address is registered to Jacobus De Beer within the 102.64.41.0/24 CIDR block (ASN 327991) in Vanderbijlpark, Gauteng, South Africa. No active threat indicators, open services, or known malicious campaigns were detected. The IP resolves to hostname ms-41-138.megasurf.co.za with valid DNS and email authentication (SPF/DMARC).
---
## Network Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 15 (Low Risk) |
| **ASN** | 327991 |
| **Organization** | Jacobus De Beer |
| **CIDR Block** | 102.64.41.0/24 |
| **Country** | South Africa (ZA) |
| **Region/City** | Gauteng, Vanderbijlpark |
| **RIR** | Afrinic |
| **Network Role** | Firewalled / No Services |
---
## Threat Indicators
- Blacklist Status: Not listed on primary threat feeds
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Known Campaigns: None detected
- Abuse Confidence Score: Not applicable
Services Discovery: No open ports detected; no HTTP/TLS services responding.
---
## DNS & Reputation Signals
- PTR Record: ms-41-138.megasurf.co.za (confirmed)
- Forward Resolution: 1 A record (forward confirmed)
- Email Authentication: SPF and DMARC records present
- Operator Score: 0.2609 (Basic)
- DNSBL Listings: 1 out of 8 total checks
---
## Neighborhood Analysis
Subnet: 102.64.41.0/24 (96 sibling IPs)
| Metric | Value |
|---|---|
| **Abuse Density** | 0.01 (1%) |
| **High-Risk Neighbors** | 1 |
| **Medium-Risk Neighbors** | 66 |
| **Low-Risk Neighbors** | 26 |
Notable Neighbor Risk Scores:
- 102.64.41.3 (40)
- 102.64.41.6 (55)
- 102.64.41.8 (40)
- 102.64.41.11 (40)
- 102.64.41.12 (55)
---
## Historical Observations
Twelve signal observations recorded in recent monitoring window:
- Geolocation signals consistently point to South Africa (ZA)
- ASN and network registration data stable
- No observed changes in threat posture
- No persistent malicious activity detected
---
## Security Recommendations
Current Status: No immediate action required. The IP exhibits normal residential/infrastructure behavior with no active threats.
Monitoring Considerations:
- Monitor subnet 102.64.41.0/24 for elevated activity; 1% abuse density indicates some neighboring IPs warrant attention
- Track for any service activation on this address
- Maintain baseline logging if traffic is observed
No firewall rules generated — Risk score below threshold for automated blocking.
---
Analyst Notes: This IP appears to be a static, low-risk address with firewalled configuration. While the immediate threat level is low, the subnet exhibits mixed risk levels with several higher-risk neighbors. Consider broader subnet monitoring if this IP begins showing anomalous behavior.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Jacobus De Beer |
| ASN | AS327991 |
| Network Name | 102.64.41.0 - 102.64.41.255 |
| CIDR Block | 102.64.41.0/24 |
| RIR | AFRINIC |
| Country | ZA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | ms-41-138.megasurf.co.za |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ms-41-138.megasurf.co.za |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| 3389 | rdp | tcp | — |
| Closed Ports | 22, 25, 80, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | localhost |
| Valid From | 2024-12-28T13:48:31+00:00 |
| Valid Until | 2027-04-02T13:48:31+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 825 days |
🛡️ Public Network Snapshot
| Origin ASN | AS327991 |
| Network Prefix | 102.64.40.0/21 |
| Route mapping | Found |
| HSTS | Enabled |
| CSP | Enabled |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 21% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 12% | 2 | 2 |
| reputation | 8% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 13% | 10 | 14 |
| Data Coherence | Mostly Consistent (85%) — 1 contradiction(s) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 08:50:24 UTC |
| Last Seen | 2026-10-07 01:05:08 UTC |
| Profile Built | 2026-10-07 01:05:30 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 102.64.41.138
Who owns the IP address 102.64.41.138?
102.64.41.138 is registered to Jacobus De Beer. The address falls within the 102.64.41.0/24 network block. Registration is held at AFRINIC.
Where is 102.64.41.138 located?
Geolocation data places 102.64.41.138 in Vanderbijlpark, Gauteng, South Africa. The local time zone is Africa/Johannesburg. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 102.64.41.138 malicious or safe?
102.64.41.138 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 102.64.41.138?
The reverse DNS (PTR) record for 102.64.41.138 is ms-41-138.megasurf.co.za. This hostname is forward-confirmed, meaning it resolves back to the same address.
What ports are open on 102.64.41.138?
Responsive ports observed on 102.64.41.138 include 443, 3389. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.