Morocco (MA) Threat Intelligence

MA

Morocco has 17,618 malicious IP addresses with 267,552 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM (11,279 IPs), MEDITELECOM (3,395 IPs), Wana Corporate (2,303 IPs). Data collected since 2023-09-11, last activity 2026-10-13.

Threat Assessment: Morocco shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM and MEDITELECOM.

Total Reports
267,552
Unique IPs
17,618
First Seen
2023-09-11
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 42,231
Suspicious Activity 20,734
High Threat 11,944
Malware Distribution 6,927
Intrusion Attempt 2,810

Top Attacking Networks

AS36903 Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM
11,279 IPs
AS36925 MEDITELECOM
3,395 IPs
AS36884 Wana Corporate
2,303 IPs

Most Reported IPs in Morocco

81.192.46.29 1,619 reports
81.192.46.49 1,607 reports
81.192.46.45 1,601 reports
81.192.46.32 1,598 reports
154.144.225.226 1,500 reports

Access this data via API

Get Morocco threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/MA

View full API documentation

See how we classify and verify threats →

Check any IP from Morocco

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS36903 Intelligence AS36925 Intelligence AS36884 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...