116.204.160.97
IP INTELLIGENCE BRIEFING
Target: 116.204.160.97/32
Classification: Low Risk / Clean
Report Generated: 2026-07-23
---
EXECUTIVE SUMMARY
The IP address 116.204.160.97 presents as a benign, low-risk endpoint with no active threat indicators. The address is geolocated to Afghanistan (AF) and classified as "clean" with minimal operator activity. No malicious campaigns, blacklisting, or associated infrastructure relationships were identified.
---
RISK ASSESSMENT
| Metric | Value | Assessment |
|---|---|---|
| Risk Score | 0 | Low Risk |
| Provider Score | 0 | None |
| Authority Score | 0 | None |
| Abuse Confidence | N/A | Not applicable |
| Reputation | Low Risk | Clean |
---
GEOLOCATION & NETWORK CONTEXT
- Country: Afghanistan (AF)
- Coordinates: 33.0°N, 66.0°E
- ASN: 133076
- BGP Prefix: 116.204.160.0/24
- Route Status: Not stable (route changes detected)
- Operator Score: 0.1304 (Minimal)
- Service Purpose: Firewalled / No Services
---
THREAT INDICATORS
- Blacklist Count: 0
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Active Campaigns: None detected
- Threat Persistence: 0 days
- Malicious Activity: None observed
---
SERVICE & DNS ANALYSIS
- Open Ports: None detected
- DNS Records: No PTR records or forward resolution
- TLS/SSL Certificates: None
- HTTP Services: None active
- Email Authentication: Not configured (no SPF/DMARC)
---
NEIGHBORHOOD ANALYSIS
- Subnet: 116.204.160.97/24
- Abuse Density: 0.0 (Clean)
- Classification: Clean
- Active Siblings: 0
- Threat Siblings: 0
- Total Siblings: 1
---
RELATIONSHIP GRAPH
- Associated Hostnames: None
- Related Organizations: None
- Linked Certificates: None
- Correlated IPs: 0
---
OBSERVATION HISTORY
Eight observations recorded. The most recent signals (2026-07-23) show consistent Afghanistan geolocation and minimal operator activity. No temporal trend toward increased risk.
---
SOC RECOMMENDATIONS
1. No Immediate Action Required – IP demonstrates clean behavior with no threat indicators
2. Standard Logging – May be logged for baseline traffic analysis
3. No Firewall Rules Needed – No active threats or malicious behavior observed
4. Monitor Route Changes – BGP prefix shows instability; monitor for potential infrastructure changes
---
CONFIDENCE LEVEL
- Overall Confidence: 0.1833 (Low data sufficiency)
- Data Coverage: 66.67% of dimensions covered
- Assessment: Limited historical data; current profile based on minimal active signals
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | APNIC Hostmaster |
| ASN | AS133076 |
| Network Name | MAINT-UAT-AF |
| CIDR Block | 116.204.160.0/24 |
| RIR | APNIC |
| Country | AF |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS133076 |
| Network Prefix | 116.204.160.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 12% | 2 | 2 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 39% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 8% | 1 | 1 |
| Overall | 14% | 8 | 10 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-05 17:50:00 UTC |
| Last Seen | 2026-08-26 19:28:16 UTC |
| Profile Built | 2026-08-29 07:38:22 UTC |
| Data Freshness | Live |
| Signal Types | 14 |
| Total Observations | 16 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 116.204.160.97
Who owns the IP address 116.204.160.97?
116.204.160.97 is registered to APNIC Hostmaster. The address falls within the 116.204.160.0/24 network block. Registration is held at APNIC.
Where is 116.204.160.97 located?
Geolocation data places 116.204.160.97 in AF. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 116.204.160.97 malicious or safe?
116.204.160.97 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.