102.64.42.226
102.64.42.226 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-42-226.megasurf.co.za. As of September 2, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected.
## IP Intelligence Briefing: 102.64.42.226/32
Classification: Moderate Risk
Date: July 2026
Source: IPDebrief Intelligence Platform
---
Executive Summary
IP address 102.64.42.226 is registered to Jacobus De Beer (ASN 327991) in Vanderbijlpark, Gauteng, South Africa. The IP presents a moderate risk profile (55/100) with no active threat indicators but exhibits network-level concerns including DNSBL listings and route instability. No open services detected; endpoint is currently firewalled.
---
Ownership & Network Profile
- ASN: 327991 (Jacobus De Beer)
- Block: 102.64.42.0/24
- RIR: AFRINIC
- Allocation Date: March 22, 2016
- Geolocation: Vanderbijlpark, Gauteng, South Africa (800km accuracy radius)
- BGP Route: 37100 → 37358 → 327991
- Route Stability: Unstable (1 change in last 30 days)
---
DNS & Infrastructure
- PTR Record: ms-42-226.megasurf.co.za
- Forward Resolution: Confirmed
- Services: None detected (firewalled/no services)
- Certificate Status: None
- DNSBL Listings: 3 of 8 total lists
---
Threat Assessment
Current Indicators:
- Risk Score: 55/100 (Moderate)
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- Blacklist Count: 0 (active)
- Known Campaigns: None identified
Behavioral Signals:
- Not persistently malicious
- No threat observation history
- Operator Score: 0.2609 (Basic)
- DNSSEC: Valid
---
Neighborhood Analysis (102.64.42.0/24)
Subnet Abuse Density: 0.01 (1%)
- High Risk Neighbors: 1 (102.64.42.13 @ 70/100)
- Medium Risk Neighbors: 66
- Low Risk Neighbors: 25
*Note: One neighbor (102.64.42.13) presents elevated risk and warrants monitoring.*
---
Observation History
16 observations recorded, most recent July 27, 2026. ASN allocation confirmed for 3,779 days with consistent registration data.
---
Recommended Security Actions
Immediate Actions:
1. Monitor: Increase logging verbosity and review recent activity
2. Block Consideration: Evaluate blocking based on operational context
Firewall Rules:
- `iptables -A INPUT -s 102.64.42.226 -j DROP`
- `nft add rule inet filter input ip saddr 102.64.42.226 drop`
- `nginx: deny 102.64.42.226;`
- Cloudflare WAF: Block with expression `ip.src eq 102.64.42.226`
- AWS WAF: Add to whitelist with description "IPDebrief risk 55"
---
Analyst Notes
While no active malicious indicators are present, the moderate risk score combined with DNSBL presence and unstable routing warrants inclusion in monitoring watchlists. The subnet shows mixed risk distribution with one high-risk neighbor. Recommend periodic re-assessment during routine intelligence cycles.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Jacobus De Beer |
| ASN | AS327991 |
| Network Name | 102.64.42.0 - 102.64.42.255 |
| CIDR Block | 102.64.42.0/24 |
| RIR | AFRINIC |
| Country | ZA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | ms-42-226.megasurf.co.za |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ms-42-226.megasurf.co.za |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 8080 | http-alt | tcp | — |
| Closed Ports | 22, 25, 80, 443, 3389, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS327991 |
| Network Prefix | 102.64.40.0/21 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 21% | 2 | 4 |
| routing | 17% | 2 | 3 |
| services | 12% | 2 | 2 |
| ownership | 19% | 3 | 3 |
| reputation | 20% | 1 | 3 |
| geolocation | 20% | 2 | 2 |
| Overall | 18% | 12 | 17 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-13 15:23:51 UTC |
| Last Seen | 2026-10-07 09:22:04 UTC |
| Profile Built | 2026-09-02 12:33:50 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 31 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 102.64.42.226
Who owns the IP address 102.64.42.226?
102.64.42.226 is registered to Jacobus De Beer. The address falls within the 102.64.42.0/24 network block. Registration is held at AFRINIC.
Where is 102.64.42.226 located?
Geolocation data places 102.64.42.226 in Vanderbijlpark, Gauteng, South Africa. The local time zone is Africa/Johannesburg. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 102.64.42.226 malicious or safe?
102.64.42.226 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 102.64.42.226?
The reverse DNS (PTR) record for 102.64.42.226 is ms-42-226.megasurf.co.za. This hostname is forward-confirmed, meaning it resolves back to the same address.
What ports are open on 102.64.42.226?
Responsive ports observed on 102.64.42.226 include 8080. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.