# IPDebrief Intelligence Briefing
Target: 102.96.207.101/32
Classification: LOW RISK
Date: 2026-07-27
Analysis Period: Current observation window
---
## Executive Summary
IP address 102.96.207.101 is a low-risk (score: 25) infrastructure endpoint belonging to ISP Orange Morocco (ASN: 36925). The IP is associated with the 102.96.0.0/14 address block under AFRINIC registration. No active threat indicators, blacklists, or malicious behavior observed. Neighborhood analysis confirms clean subnet classification with zero threat siblings.
---
## Ownership and Geolocation
- Provider: ISP Orange Morocco (AS36925)
- Network Range: 102.96.0.0 - 102.99.255.255 (102.96.0.0/14)
- Geolocation: Tarfaya, Laayoune-Sakia El Hamra Region, Morocco (MA)
- Coordinates: 27.83°N, 12.33°W
- RIR Registry: AFRINIC
- Geolocation Confidence: 2 sources, consensus achieved
---
## Threat Profile
- Overall Risk Score: 25/100 (Low Risk)
- Blacklist Status: 0/0 DNSBL listings
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Threat Indicators: None detected
- Campaign Correlation: None identified
---
## Network Services and DNS
- Open Ports: None detected
- DNS PTR Records: None
- Forward Resolution: Not confirmed
- Hosted Domains: 0
- Email Reputation: Not applicable (no DNS/email infrastructure detected)
- Service Purpose: Firewalled / No Services
---
## Neighborhood Analysis (102.96.207.0/24)
- Abuse Density: 0%
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- Inherited Risk: 0
The /24 subnet shows no abuse activity. No neighboring IPs exhibit malicious behavior.
---
## Historical Observation Summary
Thirteen observations recorded between recent timestamps. Key findings:
- Geolocation: Consistent Morocco attribution with plausible RTT metrics (avg: 169.4ms)
- Network Classification: Persistently classified as "clean"
- ASN Attribution: AS36925 (MEDITELECOM/ISP Orange Morocco)
- Persistence: No ownership changes or threat persistence indicators
- Threat Observation Count: 0
---
## Control Plane and Routing
- Origin ASN: 36925
- BGP Prefix: 102.96.192.0/18
- Route Stability: Stable (0 changes in 30 days)
- DNSSEC: Valid
- RPKI State: Not applicable
- IRR Consistency: Not applicable
---
## Recommended Actions
No immediate blocking or firewall rules recommended. The IP exhibits characteristics of legitimate ISP infrastructure with no actionable threat indicators. Standard monitoring is sufficient.
---
## Intelligence Assessment
This IP represents routine ISP backbone infrastructure. The absence of open services, combined with clean neighborhood metrics and historical observations, indicates normal operational behavior. No defensive action required beyond standard baseline monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ISP Orange Morocco |
| ASN | AS36925 |
| Network Name | 102.96.0.0 - 102.99.255.255 |
| CIDR Block | 102.96.0.0/14 |
| RIR | AFRINIC |
| Country | MA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS36925 |
| Network Prefix | 102.96.192.0/18 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 21:05:52 UTC |
| Last Seen | 2026-08-31 16:06:01 UTC |
| Profile Built | 2026-08-31 16:09:50 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 102.96.207.101
Who owns the IP address 102.96.207.101?
102.96.207.101 is registered to ISP Orange Morocco. The address falls within the 102.96.0.0/14 network block. Registration is held at AFRINIC.
Where is 102.96.207.101 located?
Geolocation data places 102.96.207.101 in Tarfaya, Laayoune-Sakia El Hamra, MA. The local time zone is Africa/Casablanca. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 102.96.207.101 malicious or safe?
102.96.207.101 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.