# 102.64.42.226 — IP Intelligence Summary

102.64.42.226 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-42-226.megasurf.co.za. As of September 2, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/102.64.42.226
- Last updated: 2026-09-02

## Ownership

- Organization: Jacobus De Beer
- Network name: 102.64.42.0 - 102.64.42.255
- Allocated block: 102.64.42.0/24
- ASN: AS327991 (https://ipdebrief.com/asn/327991)
- Regional registry: AFRINIC

## Location

- City: Vanderbijlpark
- Region: Gauteng
- Country: South Africa
- Time zone: Africa/Johannesburg

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (55/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ms-42-226.megasurf.co.za
- Forward-confirmed: yes

## Exposed services

- 8080/tcp — http-alt

## Analyst narrative

\## IP Intelligence Briefing: 102.64.42.226/32

**Classification:** Moderate Risk

**Date:** July 2026

**Source:** IPDebrief Intelligence Platform

\---

\### Executive Summary

IP address 102.64.42.226 is registered to Jacobus De Beer (ASN 327991) in Vanderbijlpark, Gauteng, South Africa. The IP presents a moderate risk profile (55/100) with no active threat indicators but exhibits network-level concerns including DNSBL listings and route instability. No open services detected; endpoint is currently firewalled.

\---

\### Ownership & Network Profile

\- **ASN:** 327991 (Jacobus De Beer)

\- **Block:** 102.64.42.0/24

\- **RIR:** AFRINIC

\- **Allocation Date:** March 22, 2016

\- **Geolocation:** Vanderbijlpark, Gauteng, South Africa (800km accuracy radius)

\- **BGP Route:** 37100 → 37358 → 327991

\- **Route Stability:** Unstable (1 change in last 30 days)

\---

\### DNS & Infrastructure

\- **PTR Record:** ms-42-226.megasurf.co.za

\- **Forward Resolution:** Confirmed

\- **Services:** None detected (firewalled/no services)

\- **Certificate Status:** None

\- **DNSBL Listings:** 3 of 8 total lists

\---

\### Threat Assessment

**Current Indicators:**

\- Risk Score: 55/100 (Moderate)

\- Known Attacker: No

\- Tor Exit Node: No

\- Spam Source: No

\- Blacklist Count: 0 (active)

\- Known Campaigns: None identified

**Behavioral Signals:**

\- Not persistently malicious

\- No threat observation history

\- Operator Score: 0.2609 (Basic)

\- DNSSEC: Valid

\---

\### Neighborhood Analysis (102.64.42.0/24)

**Subnet Abuse Density:** 0.01 (1%)

\- **High Risk Neighbors:** 1 (102.64.42.13 @ 70/100)

\- **Medium Risk Neighbors:** 66

\- **Low Risk Neighbors:** 25

*Note: One neighbor (102.64.42.13) presents elevated risk and warrants monitoring.*

\---

\### Observation History

16 observations recorded, most recent July 27, 2026. ASN allocation confirmed for 3,779 days with consistent registration data.

\---

\### Recommended Security Actions

**Immediate Actions:**

1. **Monitor:** Increase logging verbosity and review recent activity

2. **Block Consideration:** Evaluate blocking based on operational context

**Firewall Rules:**

\- \`iptables -A INPUT -s 102.64.42.226 -j DROP\`

\- \`nft add rule inet filter input ip saddr 102.64.42.226 drop\`

\- \`nginx: deny 102.64.42.226;\`

\- **Cloudflare WAF:** Block with expression \`ip.src eq 102.64.42.226\`

\- **AWS WAF:** Add to whitelist with description "IPDebrief risk 55"

\---

\### Analyst Notes

While no active malicious indicators are present, the moderate risk score combined with DNSBL presence and unstable routing warrants inclusion in monitoring watchlists. The subnet shows mixed risk distribution with one high-risk neighbor. Recommend periodic re-assessment during routine intelligence cycles.

## Nearby addresses

- 102.64.42.1 (https://ipdebrief.com/102.64.42.1)
- 102.64.42.2 (https://ipdebrief.com/102.64.42.2)
- 102.64.42.3 (https://ipdebrief.com/102.64.42.3)
- 102.64.42.4 (https://ipdebrief.com/102.64.42.4)
- 102.64.42.5 (https://ipdebrief.com/102.64.42.5)
- 102.64.42.9 (https://ipdebrief.com/102.64.42.9)
- 102.64.42.11 (https://ipdebrief.com/102.64.42.11)
- 102.64.42.12 (https://ipdebrief.com/102.64.42.12)
- 102.64.42.13 (https://ipdebrief.com/102.64.42.13)
- 102.64.42.15 (https://ipdebrief.com/102.64.42.15)
- 102.64.42.16 (https://ipdebrief.com/102.64.42.16)
- 102.64.42.17 (https://ipdebrief.com/102.64.42.17)

---

Source: IPDebrief, "102.64.42.226 IP intelligence", https://ipdebrief.com/102.64.42.226, updated 2026-09-02. Assessments are probabilistic.