Morocco (MA) Threat Intelligence

MA

Morocco has 14,646 malicious IP addresses with 234,242 abuse reports. Top threat categories include suspicious activity, severe abuse, ssh bruteforce, moderate threat, high threat. Top attacking networks: Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM (8,343 IPs), MEDITELECOM (2,802 IPs), Wana Corporate (1,906 IPs). Data collected since 2023-09-11, last activity 2026-09-06.

Threat Assessment: Morocco shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, ssh bruteforce. The majority of threats originate from networks operated by Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM and MEDITELECOM.

Total Reports
234,242
Unique IPs
14,646
First Seen
2023-09-11
Last Activity
2026-09-06

Top Threat Categories

Suspicious Activity 3,569
Severe Abuse 1,111
Ssh Bruteforce 715
Moderate Threat 312
High Threat 243

Top Attacking Networks

AS36903 Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM
8,343 IPs
AS36925 MEDITELECOM
2,802 IPs
AS36884 Wana Corporate
1,906 IPs

Most Reported IPs in Morocco

81.192.46.32 809 reports
81.192.46.29 809 reports
81.192.46.45 798 reports
81.192.46.49 798 reports
197.153.57.103 790 reports

Access this data via API

Get Morocco threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/MA

View full API documentation

See how we classify and verify threats →

Check any IP from Morocco

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS36903 Intelligence AS36925 Intelligence AS36884 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...