102.64.45.33📋 Copy

## IP INTELLIGENCE BRIEFING: 102.64.45.33/32

Classification: High Risk

Date: 2026-07-30

Analyst: IPDebrief Intelligence Team

Executive Summary

IP 102.64.45.33 is classified as High Risk with a risk score of 70. The address is associated with organization Jacobus De Beer (ASN 327991) and is geolocated to Vanderbijlpark, Gauteng, South Africa. The IP has no currently open services and is firewalled with no active ports. Despite the lack of active threat indicators, the IP is DNSBL-listed on 4 of 8 threat feeds.

Ownership and Network Context

• Organization: Jacobus De Beer
• ASN: 327991
• CIDR Block: 102.64.45.0/24
• RIR Registration: Afrinic
• Geolocation: South Africa (ZA), Gauteng region, Vanderbijlpark
• Reverse DNS: ms-45-33.megasurf.co.za

Threat Indicators

• Current Threat Status: No active threat indicators
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• DNSBL Listings: 4 of 8 threat feeds
• Abuse Confidence Score: Not available

Network Neighborhood Analysis

The /24 subnet (102.64.45.0/24) shows moderate abuse density:

• Abuse Density: 0.0982
• Subnet Classification: Mostly clean
• Total Siblings: 112
• Active Siblings: 63
• Threat Siblings: 11

High-Risk Neighbors Identified:

• 102.64.45.7 (Risk Score: 80)
• 102.64.45.3 (Risk Score: 55)
• 102.64.45.5 (Risk Score: 55)

Historical Observations

Analysis of 17 historical observations reveals:

• Threat Observation Count: 0
• Persistently Malicious: No
• Recent Classification: Mostly clean
• Stability: No recent ownership changes

Geolocation validation shows plausible origin with average RTT of 256.4ms from probe origin.

Technical Profile

• Open Ports: None
• TLS Certificate: None
• HTTP Banner: None
• DNS Resolution: Forward confirmed to ms-45-33.megasurf.co.za
• Email Authentication: SPF and DMARC records present
• Control Plane: Route stable: false

Recommended Actions

The IP is currently firewalled with no active services. However, due to its high-risk classification and DNSBL presence, the following defensive measures are recommended:

1. Firewall Rule: Consider blocking inbound traffic from this IP if not required

2. Monitoring: Continue monitoring for any service activation

3. Lateral Risk: Monitor adjacent IPs 102.64.45.3, 102.64.45.5, and 102.64.45.7 for coordinated activity

Conclusion

While 102.64.45.33 currently shows no active malicious behavior, its high risk classification and DNSBL listings warrant continued monitoring. The subnet exhibits mixed risk characteristics with 11 identified threat siblings. No immediate blocking action is required unless the IP begins serving open ports or generates active threat events.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.