102.0.30.6
IP Intelligence Briefing: 102.0.30.6/32
Date: 2026-06-12
---
**1. Core Profile**
- Risk Score: 70/100 (High Risk)
- Ownership:
- ASN: 36926 (John Kiama)
- RIR: AFRINIC
- CIDR: 102.0.0.0/14
- Geolocation:
- Country: Kenya (Nairobi County)
- Coordinates: -1.28°N, 36.82°E
- Network Role: Firewalled / No Services
- DNS:
- PTR: `6-30-0-102.r.airtelkenya.com`
- SPF: Valid (includes `spf.forwardemail.net`)
- DNSSEC: Valid
- CAA: Present
---
**2. Threat & Risk Indicators**
- DNSBL Listings:
- Listed in 4/8 DNSBLs (high risk of abuse).
- BGP:
- Prefix: `102.0.30.0/24`
- ASN 36926 (Airtel Networks Kenya Limited)
- Historical Signals:
- 12 observations (last 30 days) showing DNS, network, and security signals.
- No active open ports or TLS certificates.
---
**3. Relationships & Neighborhood**
- Linked Entities:
- DNS hostname: `6-30-0-102.r.airtelkenya.com`
- Same network: `102.0.0.0/14`
- Subnet Abuse Density:
- 1 neighbor IP (`102.0.30.22`) with risk score 70.
- Subnet abuse density: 0% (low).
---
**4. Recommended Actions**
- Block IP:
- Firewall Rules:
- `iptables -A INPUT -s 102.0.30.6 -j DROP`
- `nft add rule inet filter input ip saddr 102.0.30.6 drop`
- Cloudflare/WAF: Block `ip.src eq 102.0.30.6`
- Monitoring: Increase logging verbosity for this IP.
- Investigate:
- Verify DNS configurations and CAA records for `airtelkenya.com`.
- Monitor neighboring IPs (`102.0.30.22`) for similar risks.
---
**5. Summary**
The IP `102.0.30.6/32` is associated with a high-risk DNSBL listing and shares a subnet with another high-risk IP. While no active services are detected, its DNS and network configuration suggest potential abuse. SOC teams should block this IP and investigate its link to Airtel Kenya’s infrastructure.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | John Kiama |
| ASN | AS36926 |
| Network Name | 102.0.0.0 - 102.3.255.255 |
| CIDR Block | 102.0.0.0/14 |
| RIR | AFRINIC |
| Country | KE |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | 6-30-0-102.r.airtelkenya.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 6-30-0-102.r.airtelkenya.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 19% | 2 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 5% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-31 11:13:15 UTC |
| Last Seen | 2026-06-24 19:43:55 UTC |
| Profile Built | 2026-06-12 06:51:02 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 15 |
Full dossier details are available via our API.