102.64.43.139
102.64.43.139 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-43-139.megasurf.co.za. As of October 7, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected.
# INTELLIGENCE BRIEFING: 102.64.43.139/32
## EXECUTIVE SUMMARY
IP address 102.64.43.139 presents a moderate risk profile (Score: 55) with no active services detected. The IP is geolocated to Vanderbijlpark, Gauteng, South Africa, and is associated with organization Jacobus De Beer. The address appears firewalled with no open ports, but is listed on three of eight DNS blacklists.
## TECHNICAL PROFILE
- Risk Score: 55 (Moderate Risk)
- Classification: Firewalled / No Services
- Geolocation: Vanderbijlpark, Gauteng, South Africa (ZA)
- Coordinates: -26.7005°, 27.8179°
- ASN: AS327991 (african network information center)
- BGP Prefix: 102.64.40.0/21
- Ownership: Jacobus De Beer (102.64.43.0/24)
- RIR: AFRIINIC
## NETWORK INFRASTRUCTURE
- DNS Resolution: ms-43-139.megasurf.co.za (Forward Confirmed: Yes)
- Reverse DNS: ms-43-139.megasurf.co.za
- Open Ports: None detected
- HTTPS/TLS: No certificates found
- HTTP Services: None detected
## THREAT INDICATORS
- DNSBL Listings: 3/8 total lists
- Known Campaigns: None identified
- Threat Feeds: No active indicators
- Blacklist Count: 0 (no active blacklist matches in current profile)
## SUBNET ANALYSIS (102.64.43.0/24)
- Total IPs: 100
- Risk Distribution: 65 medium risk, 25 low risk, 0 high risk
- Abuse Density: 0
- Sample Neighbor Risk Scores: 55, 40, 0
## OBSERVATION HISTORY
12 signals observed as of 2026-07-27. Most recent observations indicate:
- ASN registration consistent across probes
- Geographic data stable (Vanderbijlpark, ZA)
- One observation flagged "has_threats": true with pulse_count: 1
- No persistent malicious behavior detected
## RELATIONSHIP GRAPH
- DNS Associations: ms-43-139.megasurf.co.za
- No additional organizational or subnet relationships detected
## RECOMMENDED ACTIONS
Based on the moderate risk profile and DNS blacklist presence:
1. Monitor: Maintain observation of this IP for service activity changes
2. Review DNSBL Listings: Investigate the 3 DNSBL listings for false positive indicators
3. Subnet Context: 65% of /24 subnet shows medium risk - consider correlating with other IPs in 102.64.43.0/24
4. Block Criteria: Not recommended for immediate blocking due to moderate risk and lack of active services
## CONCLUSION
IP 102.64.43.139 represents a moderate-risk infrastructure endpoint with no current service exposure. The DNS blacklist presence warrants investigation but does not indicate active malicious behavior. Subnet analysis shows elevated medium-risk activity across the /24 block. Recommend continued monitoring rather than immediate blocking action.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Jacobus De Beer |
| ASN | AS327991 |
| Network Name | 102.64.43.0 - 102.64.43.255 |
| CIDR Block | 102.64.43.0/24 |
| RIR | AFRINIC |
| Country | ZA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | ms-43-139.megasurf.co.za |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ms-43-139.megasurf.co.za |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS327991 |
| Network Prefix | 102.64.40.0/21 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 08:50:24 UTC |
| Last Seen | 2026-10-07 08:00:15 UTC |
| Profile Built | 2026-10-07 08:00:49 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 102.64.43.139
Who owns the IP address 102.64.43.139?
102.64.43.139 is registered to Jacobus De Beer. The address falls within the 102.64.43.0/24 network block. Registration is held at AFRINIC.
Where is 102.64.43.139 located?
Geolocation data places 102.64.43.139 in Vanderbijlpark, Gauteng, South Africa. The local time zone is Africa/Johannesburg. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 102.64.43.139 malicious or safe?
102.64.43.139 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 102.64.43.139?
The reverse DNS (PTR) record for 102.64.43.139 is ms-43-139.megasurf.co.za. This hostname is forward-confirmed, meaning it resolves back to the same address.