{"ip":"102.64.33.248","overview":{"reputation":"Moderate Risk","riskScore":40,"providerScore":0,"authorityScore":0,"stabilityScore":0,"stabilityLabel":null,"riskBreakdown":null},"ownership":{"asn":327991,"orgName":"Jacobus De Beer","netname":"102.64.33.0 - 102.64.33.255","abuseContact":null,"rir":"afrinic","registrationDate":null,"cidrBlock":"102.64.33.0/24"},"geolocation":{"country":"ZA","countryCode":"ZA","region":"MP","city":"Balfour","latitude":null,"longitude":null,"timezone":"Africa/Johannesburg","accuracyRadiusKm":800,"geoSourceCount":2,"geoConsensus":true,"geoPlausible":null},"threat":{"indicators":[],"reputationSources":[],"abuseConfidenceScore":null,"isTorExit":false,"isKnownAttacker":false,"isSpamSource":false,"blacklistCount":0,"pulsediveRisk":null,"knownCampaigns":[],"threatFeeds":[]},"networkRole":{"provider":null,"infrastructureType":null,"connectionType":null,"isCloud":false,"isCdn":false,"isVpn":false,"isProxy":false,"isTor":false,"isHosting":false,"isMobile":false,"isResidential":false,"isBogon":false,"isAnycast":false,"servicePurpose":"Firewalled / No Services"},"mobileCarrier":null,"dns":{"ptrHostnames":["ms-33-248.megasurf.co.za"],"forwardConfirmed":true,"domain":"co.za","hostedDomains":[],"hostedDomainCount":0,"emailAuth":{"hasSPF":true,"hasDMARC":true,"spfRecord":null,"dmarcRecord":null,"txtRecordCount":0,"domain":null},"forwardResolutionCount":1,"forwardHostnames":["ms-33-248.megasurf.co.za"]},"services":{"openPorts":[],"tlsCert":null,"httpTitle":null,"serverBanner":null,"certificates":null},"actions":{"recommendations":[]},"evidence":{"sources":[]},"controlPlane":{"originAsn":327991,"bgpPrefix":"102.64.32.0/20","asPath":null,"rpkiState":null,"irrConsistency":null,"routeChanges30d":0,"isRouteStable":false,"isMoas":false,"dnssecValid":true,"hasCaa":false,"dnsblListedCount":2,"dnsblTotalLists":8,"operatorScore":0.2609,"operatorLabel":"Basic","delegationAgeDays":null,"rirRegistry":null},"temporal":{"ownershipChanges":0,"avgOwnershipDays":null,"threatPersistenceDays":0,"threatObservationCount":1,"isPersistentlyMalicious":false},"neighborhood":{"subnet":"102.64.33.248/24","abuseDensity":0.1364,"classification":"mostly_clean","inheritedRisk":5,"totalSiblings":44,"activeSiblings":5,"threatSiblings":6},"campaign":{"likelihood":null,"certMatches":0,"bannerMatches":0,"correlatedIps":0,"certSubjects":[]},"geoValidation":{"geoPlausible":false,"distanceKm":null,"minRttMs":null,"avgRttMs":null,"probeCount":0,"violation":null,"minimumPossibleRttMs":null},"fingerprint":{"server":null,"statusCode":null,"hasHsts":false,"hasCsp":false,"hasHttp2":false,"faviconHash":null,"bodyHash":null,"poweredBy":null,"generator":null,"ttfbMs":null,"httpVersion":null,"hasReferrerPolicy":false,"hasPermissionsPolicy":false,"headerOrder":[]},"emailReputation":{"reputation":null,"hasScore":false,"senderScore":null},"traceroute":{"hopCount":0,"firstHopRttMs":null,"lastHopRttMs":null,"timedOutHops":0,"transitNetworks":[]},"behavioral":{"honeypotHits":0,"enumerationStrikes":0,"wafViolations":0,"totalIncidents":0,"categories":[],"autoBanned":false,"isActiveAttacker":false},"confidence":{"overall":0.2382,"dataSufficiency":1,"coveredDimensions":6,"totalDimensions":6,"label":"Very Low"},"attribution":{"confidence":70,"label":"Moderate","hasOwnership":true,"hasFcrDns":true,"geoConsensus":true,"geoPlausible":true,"hasRpkiValid":false,"hasIrrMatch":false},"dataFreshness":{"newestObservation":"2026-06-06T14:31:39.4584130+00:00","oldestSignalAge":"2026-05-21T02:21:25.0418150+00:00","signalTypesPresent":17,"totalObservations":23,"freshnessLabel":"Live"},"contradictions":[],"intent":{"classification":"Unknown Intent","reason":"Insufficient data to classify intent"},"recommendation":{"action":"Rate-Limit","severity":"medium","reason":"Moderate risk — consider rate limiting","firewallRules":[{"format":"iptables","rule":"iptables -A INPUT -s {ip} -m limit --limit 5/min -j ACCEPT  # IPDebrief: Rate-Limit — Moderate risk — consider rate limiting"},{"format":"nginx","rule":"limit_req zone=ipdebrief burst=5;  # IPDebrief: Rate-Limit — Moderate risk — consider rate limiting"},{"format":"pf","rule":"pass in on egress from {ip} max-pkt-rate 5/1  # IPDebrief: Rate-Limit — Moderate risk — consider rate limiting"}]},"dnsHygiene":{"score":80,"label":"Excellent","components":{"spf":true,"dmarc":true,"fcrDns":true,"dnssec":true,"caa":false}},"coherence":{"score":100,"label":"Consistent","contradictionCount":0},"networkTier":{"tier":"Tier 3","reason":"Basic operator with some routing infrastructure","operatorScore":0.2609,"hasRpki":false,"hasIrr":false,"ixpCount":0},"threatActor":{"type":"Suspicious Host","reason":"Threat indicators present but no specific classification","tags":["suspicious"]},"narrative":null,"meta":{"firstSeen":"2026-05-12T21:53:19.066466+00:00","lastSeen":"2026-06-06T14:18:42.69422+00:00","profileComputed":"2026-06-06T14:32:30.099168+00:00","product":"IPDebrief","copyright":"Copyright © 2026 Jason Alberino. All rights reserved."}}