# 102.64.45.61 — IP Intelligence Summary

102.64.45.61 is an IPv4 address operated by Jacobus De Beer (AS327991), geolocated to Vanderbijlpark, South Africa. Its reverse DNS name is ms-45-61.megasurf.co.za. As of October 6, 2026, IPDebrief rates it Low Risk (15/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/102.64.45.61
- Last updated: 2026-10-06

## Ownership

- Organization: Jacobus De Beer
- Network name: 102.64.45.0 - 102.64.45.255
- Allocated block: 102.64.45.0/24
- ASN: AS327991 (https://ipdebrief.com/asn/327991)
- Regional registry: AFRINIC

## Location

- City: Vanderbijlpark
- Region: Gauteng
- Country: South Africa
- Time zone: Africa/Johannesburg

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (15/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ms-45-61.megasurf.co.za
- Forward-confirmed: yes

## Analyst narrative

\# IPDebrief Intelligence Briefing

**Target IP:** 102.64.45.61/32

**Date:** 2026-07-24

**Classification:** High Risk

\---

\## Executive Summary

IP 102.64.45.61 is classified as **High Risk (Score: 80/100)**. The address resolves to a South African residential/ISP network with no open services. Despite lack of active threat indicators, the elevated risk score warrants monitoring and defensive blocking.

\---

\## Infrastructure Profile

| Attribute | Value |

|-----------|-------|

| **Organization** | Jacobus De Beer |

| **ASN** | 327991 |

| **Network Range** | 102.64.45.0/24 |

| **Geolocation** | Vanderbijlpark, Gauteng, South Africa (ZA) |

| **Service Status** | Firewalled / No Services |

| **DNS Resolution** | ms-45-61.megasurf.co.za |

\---

\## Threat Assessment

\- **Risk Score:** 80/100 (Critical)

\- **Reputation:** High Risk

\- **Known Threat Indicators:** None detected

\- **Blacklist Status:** 0 explicit blacklists; 4 DNSBL listings (of 8 total)

\- **Tor/Proxy:** Not a Tor exit node, not classified as proxy infrastructure

\- **Attack Campaign:** No known campaign associations

\---

\## Neighborhood Analysis

The /24 subnet (102.64.45.0/24) shows **moderate abuse density (7.62%)**:

\- **Total Siblings:** 105 IPs

\- **Active Siblings:** 43

\- **Threat Siblings:** 8

\- **Risk Distribution:** 1 high-risk, 71 medium-risk, 11 low-risk

**Notable Neighbors:**

\- 102.64.45.3 (Risk: 55, Authority: 60)

\- 102.64.45.9 (Risk: null, Authority: null)

\---

\## Historical Context

12 signal observations recorded. Recent signals indicate stable ownership and consistent geolocation data from the Afrinic registry. No significant threat escalation detected in observation history.

\---

\## Recommended Actions

**Priority: Critical**

1. **Immediate:** Block traffic from 102.64.45.61/32 at perimeter firewalls

2. **Monitoring:** Increase logging verbosity for this IP and review recent activity

3. **Firewall Rules:**

\- **iptables:** \`iptables -A INPUT -s 102.64.45.61 -j DROP\`

\- **nftables:** \`nft add rule inet filter input ip saddr 102.64.45.61 drop\`

\- **nginx:** \`deny 102.64.45.61;\`

\- **Cloudflare WAF:** Block with expression \`ip.src eq 102.64.45.61\`

\- **AWS WAF:** Block address 102.64.45.61/32

\---

\## Intelligence Notes

The IP resolves to a residential ISP hostname (megasurf.co.za) but presents no open services. The elevated risk score (80) despite lack of active threat indicators suggests potential for future abuse. Consider implementing rate limiting or blocking at the subnet level (102.64.45.0/24) given 8 threat siblings identified in neighborhood analysis.

**Status:** Block recommended pending operational validation.

## Nearby addresses

- 102.64.45.1 (https://ipdebrief.com/102.64.45.1)
- 102.64.45.3 (https://ipdebrief.com/102.64.45.3)
- 102.64.45.4 (https://ipdebrief.com/102.64.45.4)
- 102.64.45.5 (https://ipdebrief.com/102.64.45.5)
- 102.64.45.7 (https://ipdebrief.com/102.64.45.7)
- 102.64.45.9 (https://ipdebrief.com/102.64.45.9)
- 102.64.45.11 (https://ipdebrief.com/102.64.45.11)
- 102.64.45.12 (https://ipdebrief.com/102.64.45.12)
- 102.64.45.15 (https://ipdebrief.com/102.64.45.15)
- 102.64.45.18 (https://ipdebrief.com/102.64.45.18)
- 102.64.45.19 (https://ipdebrief.com/102.64.45.19)
- 102.64.45.22 (https://ipdebrief.com/102.64.45.22)

---

Source: IPDebrief, "102.64.45.61 IP intelligence", https://ipdebrief.com/102.64.45.61, updated 2026-10-06. Assessments are probabilistic.