# IP Intelligence Briefing: 102.0.10.84/32
Classification: Moderate Risk
Generated: 2026-07-31
## Executive Summary
IP address 102.0.10.84 is a residential or corporate endpoint located in Nairobi, Kenya, associated with ASN 36926 (John Kiama) under the AfriNIC registry. The IP exhibits moderate risk (score 50) with no active threat indicators. The address is currently firewalled with no open services detected. Recommended firewall blocking actions are available across standard security platforms.
---
## Ownership & Registration
| Attribute | Value |
|---|---|
| **ASN** | 36926 |
| **Organization** | John Kiama |
| **Netname** | 102.0.0.0 - 102.3.255.255 |
| **CIDR Block** | 102.0.0.0/14 |
| **RIR** | AfriNIC |
| **Abuse Contact** | Not provided |
The IP falls within a large /14 block assigned to John Kiama. No abuse contact information is publicly available.
---
## Geolocation
| Attribute | Value |
|---|---|
| **Country** | Kenya (KE) |
| **Region** | Nairobi County |
| **City** | Nairobi |
| **Coordinates** | -1.28, 36.82 |
| **Timezone** | Africa/Nairobi |
| **Geo Confidence** | Consensus: True |
---
## Threat Assessment
| Metric | Value |
|---|---|
| **Risk Score** | 50 / 100 (Moderate) |
| **Abuse Confidence** | Not scored |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Blacklist Count** | 0 |
| **Campaign Likelihood** | None identified |
Threat Indicators: None detected. No known campaigns, threat feeds, or blacklist associations at this time.
---
## Network Role & Services
| Attribute | Value |
|---|---|
| **Service Purpose** | Firewalled / No Services |
| **Open Ports** | None |
| **TLS Certificate** | None |
| **HTTP Banner** | None |
| **Cloud/CDN/VPN** | No |
| **Proxy/Residential** | No |
| **Is Bogon** | No |
The IP shows no active services. This suggests the endpoint is either internal, behind a firewall, or not currently hosting publicly accessible services.
---
## DNS Analysis
| Attribute | Value |
|---|---|
| **PTR Hostname** | 84-10-0-102.r.airtelkenya.com |
| **Domain** | airtelkenya.com |
| **Forward Confirmed** | No |
| **Forward Resolution Count** | 1 |
| **SPF Record** | Present (value not decoded) |
| **DMARC Record** | Absent |
| **TXT Records** | 0 |
DNS PTR resolution confirms reverse mapping to an Airtel Kenya hostname. Forward confirmation is unavailable. SPF is configured but DMARC is missing.
---
## Control Plane Data
| Attribute | Value |
|---|---|
| **Origin ASN** | 36926 |
| **BGP Prefix** | 102.0.10.0/24 |
| **Route Stable** | No |
| **DNSBL Listed** | 2 of 8 lists |
| **Operator Score** | 0.2174 (Minimal) |
| **RPKI State** | Not determined |
| **IRR Consistency** | Not determined |
The IP is associated with the 102.0.10.0/24 prefix. The route is not stable, and the IP is listed on 2 DNSBLs out of 8 checked lists.
---
## Observation History
Total observations: 11
Most Recent Signal (2026-07-31 02:50:27):
- Operator Score: 0.2174 (Minimal)
- Confidence: 0.60
- Signal Types: CAA, DNSSEC, FCRDNS
Previous Signals Include:
- Geolocation: Nairobi, KE (confidence 0.70)
- Ownership: John Kiama, AfriNIC (confidence 0.95)
- DNSBL Listings: 2 of 8 lists with high severity (confidence 0.85)
The IP has been observed consistently since July 2026 with stable geolocation and ownership data.
---
## Neighborhood Analysis
Subnet: 102.0.10.84/24
Abuse Density: 0
Total Siblings: 2
Active Siblings: 0
| Neighbor IP | Risk Score | Authority Score |
|---|---|---|
| 102.0.10.76 | 50 | 50 |
| 102.0.10.206 | 40 | 50 |
Both sibling IPs in the /24 subnet show moderate to low risk profiles. No high-risk neighbors detected.
---
## Relationships
| Type | Target |
|---|---|
| Same Network | 102.0.0.0 - 102.3.255.255 (2x) |
| DNS Association | 84-10-0-102.r.airtelkenya.com (3x) |
The IP is primarily linked to its broader /14 network block and DNS hostnames. No organizational or certificate relationships detected beyond network scope.
---
## Recommended Security Actions
Risk Score: 50 (Moderate)
Firewall Rules
| Platform | Rule |
|---|---|
| **iptables** | `iptables -A INPUT -s 102.0.10.84 -j DROP` |
| **nftables** | `nft add rule inet filter input ip saddr 102.0.10.84 drop` |
| **nginx** | `deny 102.0.10.84;` |
| pfSense | `102.0.10
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | John Kiama |
| ASN | AS36926 |
| Network Name | 102.0.0.0 - 102.3.255.255 |
| CIDR Block | 102.0.0.0/14 |
| RIR | AFRINIC |
| Country | KE |
| Abuse Contact | โ |
๐ DNS Intelligence
| PTR | 84-10-0-102.r.airtelkenya.com |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 84-10-0-102.r.airtelkenya.com |
๐ DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| Closed Ports | 22, 25, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 1 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-30 17:10:52 UTC |
| Last Seen | 2026-08-01 10:24:24 UTC |
| Profile Built | 2026-07-31 03:01:11 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.