# 102.64.45.112 — IP Intelligence Summary 102.64.45.112 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-45-112.megasurf.co.za. As of October 7, 2026, IPDebrief rates it Moderate Risk (65/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/102.64.45.112 - Last updated: 2026-10-07 ## Ownership - Organization: Jacobus De Beer - Network name: 102.64.45.0 - 102.64.45.255 - Allocated block: 102.64.45.0/24 - ASN: AS327991 (https://ipdebrief.com/asn/327991) - Regional registry: AFRINIC ## Location - City: Vanderbijlpark - Region: Gauteng - Country: South Africa - Time zone: Africa/Johannesburg ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Moderate Risk (65/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - ms-45-112.megasurf.co.za - Forward-confirmed: yes ## Analyst narrative \# IP INTELLIGENCE BRIEFING: 102.64.45.112/32 **Classification:** Moderate Risk | **Date:** July 2026 | **Location:** Vanderbijlpark, South Africa \## Executive Summary IP address 102.64.45.112 presents moderate risk (score: 55) with a history of being listed on three DNS blacklists. The address resolves to Megasurf hosting infrastructure and exhibits firewalled behavior with no active services. Neighborhood analysis indicates a low-abuse-density subnet environment. \## Infrastructure Profile **Ownership & Registration:** \- Control Plane Origin ASN: 327991 \- BGP Prefix: 102.64.40.0/21 \- Organization: Jacobus De Beer \- RIR: AFRINIC \- CIDR Block: 102.64.45.0/24 **Geolocation:** \- Country: South Africa (ZA) \- Region: Gauteng \- City: Vanderbijlpark \- Geographic Accuracy: 800km radius consensus across multiple sources **Network Services:** \- Open Ports: None detected \- TLS Certificate: Not present \- HTTP Service: Not detected \- Connection Type: Firewalled / No Services \- Infrastructure Classification: Not CDN, Not Cloud, Not VPN, Not Proxy \## DNS & Email Reputation **DNS Resolution:** \- PTR Hostname: ms-45-112.megasurf.co.za \- Forward Resolution: Confirmed (1 hostname) \- Domain: .co.za **Email Authentication:** \- SPF Record: Present \- DMARC Record: Present \- TXT Record Count: 0 **Blacklist Status:** \- DNSBL Listed Count: 3 of 8 total lists \- Reputation: Listed on multiple threat feeds \## Threat Indicators **Current Threat Profile:** \- Is Tor Exit Node: No \- Is Known Attacker: No \- Is Spam Source: No \- Abuse Confidence Score: Not applicable \- Known Campaigns: None correlated \- Threat Feeds: Empty **Behavioral Analysis:** \- Honeypot Hits: 0 \- Enumeration Strikes: 0 \- WAF Violations: 0 \- Threat Persistence Days: 0 \- Is Persistently Malicious: No \## Temporal History **Observation Timeline:** \- Total Historical Observations: 17 \- Most Recent: July 21, 2026 \- Ownership Changes: 0 \- Threat Observation Count: 0 **Historical Signals:** \- ASN registration consistently attributed to Jacobus De Beer organization \- Geolocation signals converged on Vanderbijlpark, Gauteng, South Africa \- Subnet classification: Mostly clean with 5.94% abuse density \- Inherited risk score: 2 \## Neighborhood Analysis **Subnet: 102.64.45.0/24** \- Total Siblings: 101 \- Active Siblings: 40 \- Threat Siblings: 6 \- Abuse Density: 0.01 (1%) \- Classification: Mostly Clean **Risk Distribution:** \- High Risk: 1 \- Medium Risk: 63 \- Low Risk: 10 **Notable Neighbor IPs:** \- 102.64.45.3 (Risk Score: 55, Authority Score: 60) \- 102.64.45.5 (Risk Score: 40, Authority Score: 60) \- 102.64.45.7 (Risk Score: 40, Authority Score: 60) \## Relationship Graph **Associated Entities:** \- DNS Hostname: ms-45-112.megasurf.co.za (primary association) \- No organizational links detected \- No certificate associations detected \## Recommended Actions **Monitoring & Mitigation:** 1. **DNSBL Monitoring:** Continue monitoring blacklist status; 3/8 DNSBL listings indicate some reputation issues 2. **Service Scan:** No active services detected; maintain passive monitoring for service emergence 3. **Neighborhood Context:** Subnet shows low abuse density (1%); correlate with neighbors if threat activity observed 4. **Geolocation Filtering:** Consider region-based policies if applicable; traffic originates from South Africa 5. **Hostname Association:** Monitor DNS hostname ms-45-112.megasurf.co.za for additional context **Firewall Policy:** \- No immediate blocking recommended based on moderate risk profile \- Apply rate limiting if traffic patterns become suspicious \- Consider geographic filtering based on operational requirements \## Conclusion IP 102.64.45.112 represents a moderate-risk address associated with legitimate hosting infrastructure in Vanderbijlpark, South Africa. The address shows no active malicious behavior, no open services, and belongs to a mostly-clean subnet environment. The moderate risk score stems primarily from DNS blacklist listings. SOC analysts should monitor but do not require immediate blocking actions. **Confidence Level:** High | **Data Freshness:** Recent (July 2026) | **Threat Status:** Low ## Nearby addresses - 102.64.45.1 (https://ipdebrief.com/102.64.45.1) - 102.64.45.3 (https://ipdebrief.com/102.64.45.3) - 102.64.45.4 (https://ipdebrief.com/102.64.45.4) - 102.64.45.5 (https://ipdebrief.com/102.64.45.5) - 102.64.45.7 (https://ipdebrief.com/102.64.45.7) - 102.64.45.9 (https://ipdebrief.com/102.64.45.9) - 102.64.45.11 (https://ipdebrief.com/102.64.45.11) - 102.64.45.12 (https://ipdebrief.com/102.64.45.12) - 102.64.45.15 (https://ipdebrief.com/102.64.45.15) - 102.64.45.18 (https://ipdebrief.com/102.64.45.18) - 102.64.45.19 (https://ipdebrief.com/102.64.45.19) - 102.64.45.22 (https://ipdebrief.com/102.64.45.22) --- Source: IPDebrief, "102.64.45.112 IP intelligence", https://ipdebrief.com/102.64.45.112, updated 2026-10-07. Assessments are probabilistic.