102.206.97.28
# IP Intelligence Briefing: 102.206.97.28
Classification: LOW RISK | Region: Kenya (KE) | ASN: 329664 | Organization: George Mwangi (ORG-AESL1-AFRINIC)
---
## Executive Summary
IP 102.206.97.28 presents a low-risk threat profile with an overall risk score of 25/100. The address is assigned to the African Network Information Center (AFRINIC) under organization ORG-AESL1-AFRINIC. Current intelligence indicates no active malicious activity, no detected services, and no associations with known threat campaigns.
---
## Threat Assessment
Risk Score: 25 (Low Risk)
Reputation: Low Risk
Abuse Confidence Score: Not calculated
Blacklist Status: Listed on 1 of 8 DNSBLs
Threat Indicators: None detected
Known Campaigns: None
The IP demonstrates minimal operator risk (0.1304) with no evidence of persistent malicious behavior. Single threat observation recorded with no correlation to active attacker campaigns.
---
## Network Characteristics
Geolocation: Kenya (KE) | Timezone: Africa/Nairobi
CIDR Block: 102.206.96.0/22
Network Classification: Firewalled / No Services
IPv6 Status: Not assigned
ISP/Hosting: No (Not identified as provider, CDN, VPN, proxy, or hosting infrastructure)
Services: No open ports detected. No TLS certificates, HTTP titles, or server banners observed.
---
## Neighborhood Analysis
Subnet: 102.206.97.0/24
Abuse Density: 0 (No abusive neighbors detected)
Sibling IPs: 0
Risk Distribution: No high/medium risk neighbors identified
The /24 subnet shows no neighboring IPs with abuse indicators, suggesting this is an isolated address assignment.
---
## Historical Observations
Total Observations: 14
Recent Activity: Last observed 2026-07-23
Key Historical Signals:
- Operator score: Minimal (0.1304)
- Traceroute validation: Geo-plausible with avg RTT 300.4ms, min RTT 299ms
- Ownership stability: No ownership changes recorded
- Threat persistence: 0 days
- Persistent malicious activity: False
Observation history indicates stable network characteristics with no escalating threat patterns.
---
## Relationships
Connected Entities: 2 relationships identified
- ORG-AESL1-AFRINIC (Same Network)
- ORG-AESL1-AFRINIC (Same Network)
No external associations to other networks, hostnames, organizations, or certificates detected beyond the local network assignment.
---
## Recommended Actions
Current Risk Level: LOW RISK
Recommended Actions: None required at this time. The IP does not meet threshold criteria for automated blocking or firewall rule generation.
For SOC Teams: Monitor for any changes in service presence or risk score escalation. No immediate defensive action required.
---
## Intelligence Confidence
All data sources validated through IPDebrief platform. Geolocation marked as plausible with multiple source corroboration. No conflicting signals detected across observation windows.
Report Generated: 2026-07-23
Data Freshness: Current (real-time profile)
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | George Mwangi |
| ASN | AS329664 |
| Network Name | ORG-AESL1-AFRINIC |
| CIDR Block | 102.206.96.0/22 |
| RIR | AFRINIC |
| Country | KE |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS329664 |
| Network Prefix | 102.206.97.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 35% | 2 | 2 |
| reputation | 25% | 1 | 1 |
| geolocation | 35% | 2 | 2 |
| Overall | 30% | 9 | 9 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 17:23:16 UTC |
| Last Seen | 2026-08-29 01:04:53 UTC |
| Profile Built | 2026-08-29 01:55:51 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 17 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 102.206.97.28
Who owns the IP address 102.206.97.28?
102.206.97.28 is registered to George Mwangi. The address falls within the 102.206.96.0/22 network block. Registration is held at AFRINIC.
Where is 102.206.97.28 located?
Geolocation data places 102.206.97.28 in Kenya. The local time zone is Africa/Nairobi. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 102.206.97.28 malicious or safe?
102.206.97.28 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.