# IP Intelligence Briefing: 105.71.5.195
Classification: Low Risk
Date: July 26, 2026
Status: Active Monitoring
---
## Executive Summary
IP 105.71.5.195 is classified as Low Risk (Risk Score: 25) with no active threat indicators. The address belongs to a residential or organizational network in Morocco with no evidence of malicious activity, blacklisting, or suspicious behavior patterns.
---
## Ownership and Registration
| Attribute | Value |
|---|---|
| **ASN** | 36884 |
| **Organization** | Ahmed NASSIRI |
| **Netname** | 105.71.0.0 - 105.71.255.255 |
| **CIDR Block** | 105.71.0.0/16 |
| **RIR** | AfriNIC |
| **Registration** | N/A |
---
## Geolocation
| Attribute | Value |
|---|---|
| **Country** | Morocco (MA) |
| **Region** | Rabat-Salé-Kénitra |
| **City** | Salé |
| **Coordinates** | 34.05°N, 6.8°W |
| **Timezone** | Africa/Casablanca |
| **Geo Validation** | Plausible (Consensus: Yes) |
---
## Threat Assessment
Threat Indicators: None detected
- Blacklist Count: 0
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Abuse Confidence: Not applicable
- Threat Campaigns: None correlated
- Threat Feeds: Empty
Risk Breakdown:
- Risk Score: 25 (Low)
- Provider Score: 0
- Authority Score: 0
- Stability Score: 0
---
## Network Services and DNS
| Attribute | Value |
|---|---|
| **Open Ports** | None detected |
| **Service Purpose** | Firewalled / No Services |
| **Hosted Domains** | 0 |
| **PTR Records** | None |
| **Forward Resolution** | 0 |
| **Email Auth (SPF/DMARC)** | Not configured |
| **TLS Certificate** | None |
| **HTTP Content** | None |
---
## Behavioral Analysis
| Metric | Value |
|---|---|
| **Honeypot Hits** | 0 |
| **Enumeration Strikes** | 0 |
| **WAF Violations** | 0 |
| **Total Incidents** | 0 |
| **Threat Persistence Days** | 0 |
| **Is Persistently Malicious** | No |
---
## Control Plane Analysis
| Attribute | Value |
|---|---|
| **BGP Prefix** | 105.71.5.0/24 |
| **Route Stability** | Not Stable |
| **MOAS Status** | No |
| **Route Changes (30d)** | 0 |
| **DNSBL Listed** | 1 of 8 lists |
| **Operator Score** | 0.1304 (Minimal) |
| **RPKI State** | Not assessed |
---
## Subnet Analysis
- Subnet: 105.71.5.0/24
- Neighbor Count: 0
- Abuse Density: 0
- High-Risk Neighbors: 0
- Medium-Risk Neighbors: 0
- Low-Risk Neighbors: 0
---
## Relationship Graph
The IP has a single relationship:
- Same Network: 105.71.0.0 - 105.71.255.255
No additional relationships to organizations, hostnames, or certificates were identified.
---
## Observation History
Recent observations (July 26, 2026):
- Ownership Signals: Confirmed (Confidence: 0.95)
- Geolocation Signals: Salé, Morocco (Confidence: 0.85)
- Operator Score: Minimal (0.1304)
- Threat Persistence: 0 days
- Ownership Changes: 0
No significant changes observed in recent monitoring period.
---
## Recommended Actions
Current Risk Level: Low
Recommended Action: No immediate action required
The IP does not meet threshold criteria for automated blocking. Standard network monitoring is recommended. If this IP appears in blocked traffic, investigate with additional context before implementing blocking rules.
---
## Intelligence Conclusions
1. Low Risk Profile: The IP shows no malicious activity, blacklisting, or suspicious behavioral patterns.
2. Static Network: The address appears to be part of a residential or organizational network with no public-facing services.
3. No Correlated Threats: No threat campaigns, known attackers, or spam sources associated with this IP.
4. Monitoring Recommended: While currently low risk, the lack of route stability in control plane data warrants continued observation.
5. No Neighbor Threats: The /24 subnet shows zero abuse density with no high-risk sibling IPs.
---
Prepared by: IPDebrief Intelligence Team
Classification: Standard (Internal)
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ahmed NASSIRI |
| ASN | AS36884 |
| Network Name | 105.71.0.0 - 105.71.255.255 |
| CIDR Block | 105.71.0.0/16 |
| RIR | AFRINIC |
| Country | MA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS36884 |
| Network Prefix | 105.71.5.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 12% | 2 | 2 |
| reputation | 23% | 1 | 4 |
| geolocation | 12% | 2 | 2 |
| Overall | 16% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 20:38:01 UTC |
| Last Seen | 2026-09-04 16:28:50 UTC |
| Profile Built | 2026-09-04 16:37:33 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 105.71.5.195
Who owns the IP address 105.71.5.195?
105.71.5.195 is registered to Ahmed NASSIRI. The address falls within the 105.71.0.0/16 network block. Registration is held at AFRINIC.
Where is 105.71.5.195 located?
Geolocation data places 105.71.5.195 in Madrid, Rabat-Salé-Kénitra, Spain. The local time zone is Europe/Madrid. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 105.71.5.195 malicious or safe?
105.71.5.195 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.