102.64.43.174📋 Copy

# IP Intelligence Briefing: 102.64.43.174

## Executive Summary

IP 102.64.43.174 presents a moderate risk profile (risk score: 40) with no active threat indicators. The IP is assigned to Jacobus De Beer under ASN 327991 in Vanderbijlpark, Gauteng, South Africa. The address is currently firewalled with no open services and no evidence of malicious activity in threat feeds.

## Ownership and Registration

• Organization: Jacobus De Beer
• ASN: 327991
• CIDR Block: 102.64.43.0 - 102.64.43.255
• RIR: AFRINIC
• Abuse Contact: Not listed

## Geolocation Data

• Country: South Africa (ZA)
• Region: Gauteng
• City: Vanderbijlpark
• Coordinates: -30.56°S, 22.94°E
• Timezone: Africa/Johannesburg

## Network Classification

• Primary Role: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: ms-43-174.megasurf.co.za (forward confirmed)
• Email Authentication: SPF and DMARC records present
• Not identified as: Tor exit node, CDN, proxy, VPN, hosting provider, mobile carrier, or bogon

## Threat Indicators

• Blacklist Status: Listed on 2 of 8 DNSBLs
• Known Attack Source: No
• Spam Source: No
• Campaign Association: No known campaigns
• Threat Feeds: No indicators

## Neighborhood Analysis

• Subnet: 102.64.43.0/24
• Total Siblings: 94
• Active Siblings: 34
• Threat Siblings: 4
• Abuse Density: 4.26%
• Classification: Clean
• Risk Distribution: 0 high-risk, 57 medium-risk, 16 low-risk IPs

## Historical Observations

• Total Signals: 18 observations
• Ownership Changes: None
• Threat Persistence Days: 0
• Observation Period: Recent activity documented through July 2026
• Status: Not persistently malicious

## Recommended Actions

Based on risk score 40, the following firewall rules are recommended:

iptables:

```

iptables -A INPUT -s 102.64.43.174 -j DROP

```

nftables:

```

nft add rule inet filter input ip saddr 102.64.43.174 drop

```

Cloudflare WAF:

```

{"description": "Block 102.64.43.174 — IPDebrief risk score 40", "action": "block", "filter": {"expression": "ip.src eq 102.64.43.174"}}

```

AWS WAF:

```

{"Addresses": ["102.64.43.174/32"], "Description": "IPDebrief risk 40"}

```

## Intelligence Assessment

This IP address is classified as moderate risk primarily due to DNSBL listings (2 of 8). However, the IP shows no active threat indicators, no malicious campaigns, and is not classified as a known attacker or spam source. The subnet exhibits a relatively low abuse density (4.26%), with most neighbors showing medium-risk profiles. The IP is currently firewalled with no open services, reducing immediate exploitation potential.

Recommendation: Monitor but no immediate blocking required unless additional threat signals develop. The moderate risk score warrants defensive posture but does not indicate active malicious activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.