Orange network profile

Orange Group: from France Telecom to a multi-country brand

Orange S.A. is the corporate successor to France Telecom, the privatized French state telecom that held the legacy fixed-line monopoly across France for most of the twentieth century. The Orange brand was originally a UK mobile carrier acquired by France Telecom in 2000, and the parent group progressively rebranded its entire international consumer business to Orange before formally renaming France Telecom S.A. to Orange S.A. in 2013. The French state and Bpifrance together retain a significant minority stake of roughly 23 percent, putting Orange in a similar hybrid public-private position to Deutsche Telekom.

The group runs national operations in France (the home market and the largest single contributor to revenue), Spain (Orange Espagne, recently merged with MasMovil into the MasOrange combined entity), Poland (Orange Polska), Romania, Slovakia, Belgium (through the BASE acquisition and the VOO acquisition that combined fixed and mobile), Luxembourg, Moldova, Jordan, and across Africa and the Middle East under Orange Middle East and Africa. Africa is a large and growing operational segment for the group through fixed broadband, mobile, and Orange Money mobile financial services.

AS3215 and AS5511: retail access versus international transit

Orange's ASN portfolio is split cleanly between consumer-access and backbone identities. AS3215 is the primary France-retail consumer broadband ASN, used historically for France Telecom DSL and currently for Orange France residential FTTH and DSL. AS5511 is Opentransit, Orange's international IP transit backbone, which carries peering and wholesale capacity across Europe, North America, and into Africa and Asia. The two ASNs perform fundamentally different roles and an IP on one tells a very different story from an IP on the other.

An IP geolocating to AS3215 is almost always a French residential or small-business retail subscriber. An IP geolocating to AS5511 is more likely backbone or wholesale-customer traffic riding Orange's international transit — including other operators' downstream-customer flows that happen to traverse Opentransit. Treating both as equivalent "Orange" for fraud or abuse triage loses the most useful structural distinction available from the public-data layer.

Livebox CPE and FTTH leadership in France

Orange operates one of the most advanced FTTH networks in Europe by coverage and by penetration. France adopted aggressive national fiber rollout targets in the 2010s, and Orange has been the largest single deployer of FTTH to French homes, passing tens of millions of homes by the mid-2020s. Service tiers extend to 2 Gbps and higher symmetric on FTTH, with multi-gigabit Wi-Fi 6E delivered through the Livebox 6 and Livebox 7 customer-premises equipment generations. The Livebox is one of the most recognizable ISP-supplied CPEs in Europe and is provisioned under managed-router models that give Orange direct visibility into and control over the home network configuration.

The fiber strategy contrasts with Germany's copper-heavy approach and put Orange in a strong competitive position against the disruptor Free and against the SFR and Bouygues alternatives. Coverage in dense urban areas is essentially complete; coverage in rural France is delivered through Orange-led RIP (Reseau d'Initiative Publique) regional public-private projects rather than through Orange's own private build. RIP fiber may carry Orange retail service over an alt-net's physical infrastructure with a different wholesale-attribution chain than purely Orange-built lines.

PTR conventions in France and across the footprint

Orange France residential PTR conventions are distinctive. Dynamic consumer lines commonly carry hostnames in the form XXX-XXX-XXX-XXX.rev.numericable.fr on legacy Numericable acquisitions (now SFR rather than Orange) or XXX.fbx.proxad.net on Free lines — Orange's own PTR signatures include domains under wanadoo.fr (legacy from the former ISP brand that was integrated into Orange in 2006), orange.fr, and abo.wanadoo.fr. The wanadoo.fr legacy domain is still actively used on dynamic French consumer assignments despite Wanadoo having been rebranded out of existence two decades ago, and its presence in a French PTR reliably points at Orange France retail.

In other national markets the PTR signatures differ. Orange Polska uses orange.pl; Orange Espagne uses Orange-tagged hostnames that are now transitioning under the MasOrange combined entity. African opcos commonly use country-specific Orange domains. Recognizing the Wanadoo legacy is the single most useful PTR-recognition tip specific to Orange France because alternative French operators do not use the wanadoo.fr brand, and it cuts through attribution ambiguity quickly.

Mobile networks and 5G across the European footprint

Orange operates national mobile networks across all its main European markets. The French mobile network has consistently scored well on independent quality benchmarks and has been an early 5G mid-band deployer using primarily 3.5 GHz spectrum. Coverage in Spain through Orange Espagne and now MasOrange combines what were previously two separate networks into a consolidated footprint. Orange Polska, Orange Romania, and Orange Belgium each run their own national mobile networks under the country regulator with separately licensed spectrum.

Mobile data IP attribution follows the standard European-mobile pattern: CGNAT-based IPv4 sharing with packet-gateway concentration in a small number of public IP pools, minimal PTRs on the data plane, and per-session IPv6 prefix delegation where IPv6 is enabled. France has historically had high mobile data adoption and aggressive pricing, so per-IP user density on Orange France mobile packet gateways tends to be high relative to fixed-broadband ratios.

IPv6 deployment and the dual-stack baseline

IPv6 deployment on Orange France retail FTTH and DSL is mature, with most modern residential lines receiving a dual-stack assignment that includes a dynamic IPv4 address from AS3215 pools and an IPv6 prefix delegated to the Livebox. Orange France mobile runs native IPv6 with 464XLAT for legacy IPv4-only applications. The standard residential leak surface applies: a VPN client that only tunnels IPv4 will leave the IPv6 path unguarded, and the customer prefix exposes Orange attribution even when IPv4 is tunneled.

IPv6 deployment is less uniform across the non-French Orange operations. Orange Polska and Orange Romania have been deploying IPv6 with varying pace and configuration. For a precise answer on whether a specific Orange line will expose IPv6 outside a VPN tunnel, an empirical test from the line itself is more reliable than assumed coverage from group-wide IPv6 statements. Run an IPv6 leak test before assuming VPN coverage on any Orange line.

Orange Business and the enterprise services arm

Orange Business (formerly Orange Business Services) is the group's enterprise IT, network, and managed services arm. It operates global wide-area network services, cybersecurity managed services, cloud integration, and contact-center solutions for multinational corporate customers. Orange Business uses dedicated IP ranges within the broader Orange ASN portfolio and is a major customer of AS5511 Opentransit for international connectivity. The corporate identity attributed to an Orange Business managed IP belongs to the customer behind the contract rather than to a consumer subscriber, which is the standard enterprise attribution pattern.

The implication for triage is that Orange-tagged IPs in business address blocks are operationally distinct from consumer Orange France residential or mobile traffic. Treating both as "Orange" combines very different populations and produces misleading patterns. The RIPE WHOIS records on enterprise blocks usually include the corporate customer where contractually disclosed or reference Orange Business generically where confidentiality applies.

Sosh, sub-brands, and the consumer-brand layer

Orange France operates Sosh as an online-only low-cost sub-brand for mobile and fiber, targeted at younger or price-sensitive consumers who do not want the full Orange retail and customer-service package. Sosh subscribers ride the Orange France access network and present at the IP layer as standard Orange France retail customers — the brand exists for marketing, billing, and channel segmentation but not as a separate network. The same pattern recurs internationally with sub-brands and MVNO partners across Orange's other national operating companies.

The brand-versus-network gap for Orange is narrower than for Vodafone because the group generally operates one access network per country rather than maintaining acquired-operator identities (with the exception of MasOrange in Spain, where the MasMovil merger creates a transitional period). For attribution purposes the ASN plus country field is the operationally meaningful identifier, and the consumer brand is best treated as a billing-and-marketing detail.

Wholesale unbundling and ARCEP regulatory context

France's telecom market structure is heavily shaped by the regulator ARCEP (Autorite de regulation des communications electroniques, des postes et de la distribution de la presse), which imposes wholesale-access obligations on Orange as the incumbent operator. Local-loop unbundling on copper, bitstream access on DSL, and passive-and-active wholesale on FTTH are all regulated under ARCEP frameworks. The French FTTH wholesale model in particular separates "zones tres denses" (very dense urban areas where competing operators can build their own fiber) from "zones moins denses" (less dense areas where one operator builds and others rent passive access on regulated terms).

The practical implication is that Orange-built FTTH lines may carry retail service from competitors Free, SFR, or Bouygues Telecom — and the public IP on such a line will belong to the retail operator's ASN, not to Orange's AS3215. Conversely, alt-net-built RIP fiber may carry Orange retail service over non-Orange physical infrastructure with Orange retail IP attribution. The physical-versus-retail attribution chain in France is therefore more complex than in markets with less aggressive wholesale regulation, and "the operator who owns the fiber" is not always "the operator on the customer's bill" or "the ASN that originates the public IP."

Submarine cables, transit, and the global backbone footprint

Orange operates one of the larger international telecom backbones through Opentransit and through significant stakes in submarine cable systems connecting Europe to North America, Africa, the Middle East, and Asia. The submarine asset base traces back to France Telecom Marine and to consortium memberships in cables such as TAT, SEA ME WE 4 and SEA ME WE 5 across the Indian Ocean, and ACE along the West African coast. This subsea footprint underpins why Opentransit IP traffic from AS5511 can geolocate to a wide range of international peering points rather than to the French home market.

For IP-attribution work the implication is that traffic from AS5511 may have nothing to do with French consumer activity at all — it can be a downstream wholesale customer on another continent traversing Orange transit. Treating AS5511 IPs as "French" by default is a common attribution error that flows from naive country-of-registration lookup. The country field on the ASN points at the corporate domicile of the transit operator, not at the geographic origin of the end-user traffic riding that transit.

Investigation pitfalls specific to Orange IPs

Several attribution traps recur with Orange IPs. First, AS3215 (consumer-retail) and AS5511 (Opentransit international backbone) are fundamentally different network roles, and attributing both as identical "Orange" loses the most useful distinction. Second, the legacy wanadoo.fr domain in PTRs identifies Orange France retail despite the Wanadoo brand having been retired years ago. Third, RIP fiber lines in rural France may carry Orange retail service over alt-net infrastructure with a more complex wholesale-attribution chain, so an Orange retail subscription does not necessarily mean an Orange-owned physical line.

Fourth, the MasOrange combined entity in Spain is transitional, and ASN assignments and corporate ownership of Orange Espagne legacy ranges may not match published WHOIS during the integration period. Fifth, Orange Business managed IPs are corporate-customer attributions and should not be treated as consumer Orange France traffic. Sixth, the African opcos run under different regulatory regimes from EU operations, and abuse-handling workflows that work for Orange France will not produce results for Orange Cote d'Ivoire or Orange Senegal subscribers.

Quick reference summary

Orange is the privatized successor to France Telecom, operating consumer fixed broadband, mobile, and enterprise services across France, Spain (through MasOrange), Poland, Belgium, several Eastern European markets, and African and Middle Eastern countries. AS3215 is the France retail consumer-broadband ASN; AS5511 is Opentransit, the international transit backbone. The two roles are distinct and should not be conflated in attribution work. Orange France leads European FTTH deployment and runs the Livebox CPE on a managed model with deep visibility into the home network.

Mobile data uses CGNAT and runs native IPv6 with 464XLAT translation. The wanadoo.fr PTR legacy still identifies Orange France retail. For per-IP attribution, pair an ASN lookup with a WHOIS lookup to identify which national opco or business segment an IP actually belongs to before assuming consumer attribution from the brand label alone.

The French wholesale environment under ARCEP regulation means that a meaningful share of fiber lines carry retail service from operators other than the one that built the physical infrastructure, and the public IP on such a line follows the retail operator rather than the network owner. Combine that with the Opentransit subsea backbone serving downstream international wholesale customers, the MasOrange transition in Spain, and the African and Middle Eastern opcos each operating under their own regulators, and Orange becomes one of the more structurally complex European telecom attributions to interpret correctly without checking the ASN and WHOIS layer explicitly.