# 102.64.43.174 — IP Intelligence Summary

102.64.43.174 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-43-174.megasurf.co.za. As of October 7, 2026, IPDebrief rates it Low Risk (15/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/102.64.43.174
- Last updated: 2026-10-07

## Ownership

- Organization: Jacobus De Beer
- Network name: 102.64.43.0 - 102.64.43.255
- Allocated block: 102.64.43.0/24
- ASN: AS327991 (https://ipdebrief.com/asn/327991)
- Regional registry: AFRINIC

## Location

- City: Vanderbijlpark
- Region: Gauteng
- Country: South Africa
- Time zone: Africa/Johannesburg

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (15/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ms-43-174.megasurf.co.za
- Forward-confirmed: yes

## Analyst narrative

\# IP Intelligence Briefing: 102.64.43.174

\## Executive Summary

IP 102.64.43.174 presents a moderate risk profile (risk score: 40) with no active threat indicators. The IP is assigned to Jacobus De Beer under ASN 327991 in Vanderbijlpark, Gauteng, South Africa. The address is currently firewalled with no open services and no evidence of malicious activity in threat feeds.

\## Ownership and Registration

\- **Organization:** Jacobus De Beer

\- **ASN:** 327991

\- **CIDR Block:** 102.64.43.0 - 102.64.43.255

\- **RIR:** AFRINIC

\- **Abuse Contact:** Not listed

\## Geolocation Data

\- **Country:** South Africa (ZA)

\- **Region:** Gauteng

\- **City:** Vanderbijlpark

\- **Coordinates:** -30.56°S, 22.94°E

\- **Timezone:** Africa/Johannesburg

\## Network Classification

\- **Primary Role:** Firewalled / No Services

\- **Open Ports:** None detected

\- **DNS Resolution:** ms-43-174.megasurf.co.za (forward confirmed)

\- **Email Authentication:** SPF and DMARC records present

\- **Not identified as:** Tor exit node, CDN, proxy, VPN, hosting provider, mobile carrier, or bogon

\## Threat Indicators

\- **Blacklist Status:** Listed on 2 of 8 DNSBLs

\- **Known Attack Source:** No

\- **Spam Source:** No

\- **Campaign Association:** No known campaigns

\- **Threat Feeds:** No indicators

\## Neighborhood Analysis

\- **Subnet:** 102.64.43.0/24

\- **Total Siblings:** 94

\- **Active Siblings:** 34

\- **Threat Siblings:** 4

\- **Abuse Density:** 4.26%

\- **Classification:** Clean

\- **Risk Distribution:** 0 high-risk, 57 medium-risk, 16 low-risk IPs

\## Historical Observations

\- **Total Signals:** 18 observations

\- **Ownership Changes:** None

\- **Threat Persistence Days:** 0

\- **Observation Period:** Recent activity documented through July 2026

\- **Status:** Not persistently malicious

\## Recommended Actions

Based on risk score 40, the following firewall rules are recommended:

**iptables:**

\`\`\`

iptables -A INPUT -s 102.64.43.174 -j DROP

\`\`\`

**nftables:**

\`\`\`

nft add rule inet filter input ip saddr 102.64.43.174 drop

\`\`\`

**Cloudflare WAF:**

\`\`\`

{"description": "Block 102.64.43.174 — IPDebrief risk score 40", "action": "block", "filter": {"expression": "ip.src eq 102.64.43.174"}}

\`\`\`

**AWS WAF:**

\`\`\`

{"Addresses": \["102.64.43.174/32"\], "Description": "IPDebrief risk 40"}

\`\`\`

\## Intelligence Assessment

This IP address is classified as moderate risk primarily due to DNSBL listings (2 of 8). However, the IP shows no active threat indicators, no malicious campaigns, and is not classified as a known attacker or spam source. The subnet exhibits a relatively low abuse density (4.26%), with most neighbors showing medium-risk profiles. The IP is currently firewalled with no open services, reducing immediate exploitation potential.

**Recommendation:** Monitor but no immediate blocking required unless additional threat signals develop. The moderate risk score warrants defensive posture but does not indicate active malicious activity.

## Nearby addresses

- 102.64.43.1 (https://ipdebrief.com/102.64.43.1)
- 102.64.43.3 (https://ipdebrief.com/102.64.43.3)
- 102.64.43.6 (https://ipdebrief.com/102.64.43.6)
- 102.64.43.8 (https://ipdebrief.com/102.64.43.8)
- 102.64.43.9 (https://ipdebrief.com/102.64.43.9)
- 102.64.43.10 (https://ipdebrief.com/102.64.43.10)
- 102.64.43.11 (https://ipdebrief.com/102.64.43.11)
- 102.64.43.12 (https://ipdebrief.com/102.64.43.12)
- 102.64.43.14 (https://ipdebrief.com/102.64.43.14)
- 102.64.43.15 (https://ipdebrief.com/102.64.43.15)
- 102.64.43.17 (https://ipdebrief.com/102.64.43.17)
- 102.64.43.18 (https://ipdebrief.com/102.64.43.18)

---

Source: IPDebrief, "102.64.43.174 IP intelligence", https://ipdebrief.com/102.64.43.174, updated 2026-10-07. Assessments are probabilistic.