# IP INTELLIGENCE BRIEFING
Target: 102.98.96.94/32
Date: 2026-07-23
Classification: Low Risk / Legitimate Infrastructure
---
## EXECUTIVE SUMMARY
IP 102.98.96.94 is a legitimate mobile carrier address belonging to ISP Orange Morocco, operating from the Casablanca region. The IP exhibits no malicious indicators, maintains a clean security posture, and presents no immediate threat to network operations.
---
## INFRASTRUCTURE PROFILE
Ownership & Network:
- Organization: ISP Orange Morocco
- ASN: 36925
- CIDR Block: 102.96.0.0/14 (Afrinic RIR)
- Network Type: Mobile Carrier
- Geolocation: Casablanca-Settat, Morocco (MA)
- Coordinates: 33.59°N, 7.62°W
Risk Assessment:
- Overall Risk Score: 0/100 (Low Risk)
- Provider Score: 0
- Authority Score: 0
- Operator Score: 0.1304 (Minimal)
- Stability Status: Stable
---
## THREAT INDICATOR ANALYSIS
Active Threat Indicators: None Detected
- Blacklist Count: 0
- DNSBL Listings: 0
- Threat Feeds: Empty
- Known Campaigns: None
- Abuse Confidence Score: Not applicable
Malicious Activity Flags:
- Not a Tor exit node
- Not a known attacker IP
- Not identified as spam source
- No persistent malicious activity observed
- Zero threat observation count in historical data
---
## NETWORK BEHAVIOR
Service Status: Firewalled / No Services
- Open Ports: None detected
- DNS Resolution: Forward confirmed (false)
- PTR Hostnames: None
- HTTP Services: Inactive
Control Plane:
- Route Stability: False
- BGP Prefix: 102.98.64.0/18
- RPKI State: Not validated
- IRR Consistency: Not applicable
---
## HISTORICAL OBSERVATIONS
Total Observations: 11
Observation Period: Recent monitoring cycle (2026-07-23)
Signal Evolution:
- Ownership: No changes recorded
- Geolocation: Consistent Casablanca, Morocco attribution
- Network Role: Persistent classification as mobile carrier
- Threat Posture: Zero threat persistence days, zero malicious activity
Key Observations:
1. Subnet 102.98.96.94/24 classified as clean with zero abuse density
2. Inherited risk from parent network: 0
3. No active or threat sibling IPs in /24 neighborhood
4. Network maintains legitimate ISP infrastructure status
---
## RELATIONSHIP MAPPING
Connected Entities: 3 relationships identified
- Network Association: 102.96.0.0 - 102.99.255.255 (ISP Orange Morocco)
- All relationships indicate same network membership
Neighborhood Analysis (102.98.96.0/24):
- Abuse Density: 0%
- Risk Distribution: High (0), Medium (0), Low (0)
- Active Siblings: 0
- Threat Siblings: 0
- Overall Classification: Clean
---
## SECURITY ASSESSMENT & RECOMMENDATIONS
Risk Rating: LOW
Threat Level: MINIMAL
Key Findings:
- IP represents legitimate mobile carrier infrastructure
- No malicious behavior or threat indicators detected
- Clean reputation across all threat feeds
- No blacklist associations or abuse reports
- Properly registered with Afrinic RIR
Recommended Actions:
1. No blocking required – IP is legitimate infrastructure
2. Monitoring: Continue standard network monitoring procedures
3. Traffic Handling: Allow normal traffic patterns consistent with mobile carrier services
4. No firewall rules needed based on current risk profile
Context for SOC Teams:
This IP belongs to a major Moroccan ISP (Orange) and serves as a legitimate mobile carrier endpoint. The address shows no indicators of compromise, command-and-control activity, or malicious reputation. Standard defensive posture applies with no special hardening measures required.
---
Report Generated: 2026-07-23
Data Sources: IPDebrief Intelligence Platform
Coverage: Full profile, historical observations, relationship mapping, and neighborhood analysis
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ISP Orange Morocco |
| ASN | AS36925 |
| Network Name | 102.96.0.0 - 102.99.255.255 |
| CIDR Block | 102.96.0.0/14 |
| RIR | AFRINIC |
| Country | MA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS36925 |
| Network Prefix | 102.98.64.0/18 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-05 23:57:31 UTC |
| Last Seen | 2026-08-26 22:37:27 UTC |
| Profile Built | 2026-08-29 07:15:02 UTC |
| Data Freshness | Live |
| Signal Types | 12 |
| Total Observations | 13 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 102.98.96.94
Who owns the IP address 102.98.96.94?
102.98.96.94 is registered to ISP Orange Morocco. The address falls within the 102.96.0.0/14 network block. Registration is held at AFRINIC.
Where is 102.98.96.94 located?
Geolocation data places 102.98.96.94 in Casablanca, Casablanca-Settat, MA. The local time zone is Africa/Casablanca. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 102.98.96.94 malicious or safe?
102.98.96.94 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 102.98.96.94 a VPN, proxy, or data center address?
102.98.96.94 is classified as a mobile network based on network ownership and behavioural analysis.