102.97.185.120
# INTELLIGENCE BRIEFING: 102.97.185.120
Classification: LOW RISK / LEGITIMATE INFRASTRUCTURE
Date: 2026-07-18
Analysis Period: Current observation cycle
---
## EXECUTIVE SUMMARY
The IP address 102.97.185.120 is classified as Low Risk with no active threat indicators. The address belongs to ISP Orange Morocco (ASN 36925) within the 102.96.0.0/14 block. No malicious activity, blacklist listings, or threat campaigns were detected. No immediate action is recommended.
---
## TECHNICAL PROFILE
| Attribute | Value |
|---|---|
| **Risk Score** | 0.0 |
| **Provider Score** | 0.0 |
| **Authority Score** | 0.0 |
| **ASN** | 36925 |
| **Organization** | ISP Orange Morocco |
| **CIDR Block** | 102.96.0.0/14 |
| **RIR** | AFRINIC |
| **Infrastructure Type** | Mobile Carrier |
| **Geolocation** | GB / MA (inconsistent) |
---
## THREAT INDICATORS
- Blacklist Count: 0
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Abuse Confidence Score: Not applicable
- Known Campaigns: None
---
## NETWORK BEHAVIOR
- Open Ports: None
- HTTP/HTTPS Services: None
- TLS Certificates: None
- DNS Resolution: None
- Connection Type: Mobile Carrier
- Service Status: Firewalled / No Services
---
## OBSERVATION HISTORY
Total Observations: 12 (as of 2026-07-18)
Geolocation Signals:
- 2026-07-18T14:17:25 UTC: Tangier, Morocco (MA) - Confidence 0.70
- 2026-07-18T14:16:45 UTC: London, UK (GB) - Consensus conflict
- 2026-07-18T14:16:31 UTC: Casablanca 20190, Morocco (MA) - Confidence 0.95
Routing Signals:
- Operator Score: 0.1304 (Minimal)
- BGP Prefix: 102.97.128.0/18
- Route Stability: Unstable
- DNSSEC: Valid
---
## NETWORK RELATIONSHIPS
| Type | Target |
|---|---|
| Same Network | 102.96.0.0 - 102.99.255.255 |
| Same Network | 102.96.0.0 - 102.99.255.255 |
External Entity Links: None identified (no hostnames, certificates, or organization relationships detected)
---
## NEIGHBORHOOD ANALYSIS
Subnet: 102.97.185.120/24
- Neighbor Count: 0
- Abuse Density: 0.0
- High Risk Neighbors: 0
- Medium Risk Neighbors: 0
- Low Risk Neighbors: 0
---
## SECURITY ACTIONS
Recommended Actions: None
Firewall Rules: Not required
Risk Assessment: This IP exhibits no malicious characteristics. It is a legitimate mobile carrier infrastructure address with no services exposed.
---
## INTELLIGENCE ANALYSIS NOTES
1. Geo Inconsistency: Location signals show conflicting data between Morocco (MA) and UK (GB). This is consistent with mobile carrier routing where geolocation databases may have outdated or conflicting entries.
2. Infrastructure Type: The IP is classified as a Mobile Carrier with no exposed services. This is typical for cellular network infrastructure addresses.
3. No Threat Correlation: Zero threat indicators, blacklist entries, or historical malicious activity detected.
4. Network Context: No threat activity observed in the /24 neighborhood. No sibling IPs flagged as malicious.
---
## RECOMMENDATION
Monitor / No Action Required
This IP address represents legitimate telecommunications infrastructure with no threat indicators. No defensive action is recommended at this time. Continue monitoring for any changes in behavior or threat profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ISP Orange Morocco |
| ASN | AS36925 |
| Network Name | 102.96.0.0 - 102.99.255.255 |
| CIDR Block | 102.96.0.0/14 |
| RIR | AFRINIC |
| Country | MA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS36925 |
| Network Prefix | 102.97.128.0/18 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-10 02:36:12 UTC |
| Last Seen | 2026-07-18 14:15:26 UTC |
| Profile Built | 2026-08-29 06:15:01 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 16 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 102.97.185.120
Who owns the IP address 102.97.185.120?
102.97.185.120 is registered to ISP Orange Morocco. The address falls within the 102.96.0.0/14 network block. Registration is held at AFRINIC.
Where is 102.97.185.120 located?
Geolocation data places 102.97.185.120 in London, Tanger-Tetouan-Al Hoceima, United Kingdom. The local time zone is Europe/London. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 102.97.185.120 malicious or safe?
102.97.185.120 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 102.97.185.120 a VPN, proxy, or data center address?
102.97.185.120 is classified as a mobile network based on network ownership and behavioural analysis.