# 102.64.43.139 — IP Intelligence Summary

102.64.43.139 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-43-139.megasurf.co.za. As of October 7, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/102.64.43.139
- Last updated: 2026-10-07

## Ownership

- Organization: Jacobus De Beer
- Network name: 102.64.43.0 - 102.64.43.255
- Allocated block: 102.64.43.0/24
- ASN: AS327991 (https://ipdebrief.com/asn/327991)
- Regional registry: AFRINIC

## Location

- City: Vanderbijlpark
- Region: Gauteng
- Country: South Africa
- Time zone: Africa/Johannesburg

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (55/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ms-43-139.megasurf.co.za
- Forward-confirmed: yes

## Analyst narrative

\# INTELLIGENCE BRIEFING: 102.64.43.139/32

\## EXECUTIVE SUMMARY

IP address 102.64.43.139 presents a moderate risk profile (Score: 55) with no active services detected. The IP is geolocated to Vanderbijlpark, Gauteng, South Africa, and is associated with organization Jacobus De Beer. The address appears firewalled with no open ports, but is listed on three of eight DNS blacklists.

\## TECHNICAL PROFILE

\- **Risk Score:** 55 (Moderate Risk)

\- **Classification:** Firewalled / No Services

\- **Geolocation:** Vanderbijlpark, Gauteng, South Africa (ZA)

\- **Coordinates:** -26.7005°, 27.8179°

\- **ASN:** AS327991 (african network information center)

\- **BGP Prefix:** 102.64.40.0/21

\- **Ownership:** Jacobus De Beer (102.64.43.0/24)

\- **RIR:** AFRIINIC

\## NETWORK INFRASTRUCTURE

\- **DNS Resolution:** ms-43-139.megasurf.co.za (Forward Confirmed: Yes)

\- **Reverse DNS:** ms-43-139.megasurf.co.za

\- **Open Ports:** None detected

\- **HTTPS/TLS:** No certificates found

\- **HTTP Services:** None detected

\## THREAT INDICATORS

\- **DNSBL Listings:** 3/8 total lists

\- **Known Campaigns:** None identified

\- **Threat Feeds:** No active indicators

\- **Blacklist Count:** 0 (no active blacklist matches in current profile)

\## SUBNET ANALYSIS (102.64.43.0/24)

\- **Total IPs:** 100

\- **Risk Distribution:** 65 medium risk, 25 low risk, 0 high risk

\- **Abuse Density:** 0

\- **Sample Neighbor Risk Scores:** 55, 40, 0

\## OBSERVATION HISTORY

12 signals observed as of 2026-07-27. Most recent observations indicate:

\- ASN registration consistent across probes

\- Geographic data stable (Vanderbijlpark, ZA)

\- One observation flagged "has_threats": true with pulse_count: 1

\- No persistent malicious behavior detected

\## RELATIONSHIP GRAPH

\- **DNS Associations:** ms-43-139.megasurf.co.za

\- No additional organizational or subnet relationships detected

\## RECOMMENDED ACTIONS

Based on the moderate risk profile and DNS blacklist presence:

1. **Monitor:** Maintain observation of this IP for service activity changes

2. **Review DNSBL Listings:** Investigate the 3 DNSBL listings for false positive indicators

3. **Subnet Context:** 65% of /24 subnet shows medium risk - consider correlating with other IPs in 102.64.43.0/24

4. **Block Criteria:** Not recommended for immediate blocking due to moderate risk and lack of active services

\## CONCLUSION

IP 102.64.43.139 represents a moderate-risk infrastructure endpoint with no current service exposure. The DNS blacklist presence warrants investigation but does not indicate active malicious behavior. Subnet analysis shows elevated medium-risk activity across the /24 block. Recommend continued monitoring rather than immediate blocking action.

## Nearby addresses

- 102.64.43.1 (https://ipdebrief.com/102.64.43.1)
- 102.64.43.3 (https://ipdebrief.com/102.64.43.3)
- 102.64.43.6 (https://ipdebrief.com/102.64.43.6)
- 102.64.43.8 (https://ipdebrief.com/102.64.43.8)
- 102.64.43.9 (https://ipdebrief.com/102.64.43.9)
- 102.64.43.10 (https://ipdebrief.com/102.64.43.10)
- 102.64.43.11 (https://ipdebrief.com/102.64.43.11)
- 102.64.43.12 (https://ipdebrief.com/102.64.43.12)
- 102.64.43.14 (https://ipdebrief.com/102.64.43.14)
- 102.64.43.15 (https://ipdebrief.com/102.64.43.15)
- 102.64.43.17 (https://ipdebrief.com/102.64.43.17)
- 102.64.43.18 (https://ipdebrief.com/102.64.43.18)

---

Source: IPDebrief, "102.64.43.139 IP intelligence", https://ipdebrief.com/102.64.43.139, updated 2026-10-07. Assessments are probabilistic.