Morocco (MA) Threat Intelligence

MA

Morocco has 17,618 malicious IP addresses with 267,540 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM (11,256 IPs), MEDITELECOM (3,391 IPs), Wana Corporate (2,297 IPs). Data collected since 2023-09-11, last activity 2026-10-13.

Threat Assessment: Morocco shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM and MEDITELECOM.

Total Reports
267,540
Unique IPs
17,618
First Seen
2023-09-11
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 42,231
Suspicious Activity 20,734
High Threat 11,929
Malware Distribution 6,927
Intrusion Attempt 2,810

Top Attacking Networks

AS36903 Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM
11,256 IPs
AS36925 MEDITELECOM
3,391 IPs
AS36884 Wana Corporate
2,297 IPs

Most Reported IPs in Morocco

81.192.46.29 1,618 reports
81.192.46.49 1,607 reports
81.192.46.45 1,600 reports
81.192.46.32 1,597 reports
154.144.225.226 1,499 reports

Access this data via API

Get Morocco threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/MA

View full API documentation

See how we classify and verify threats →

Check any IP from Morocco

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS36903 Intelligence AS36925 Intelligence AS36884 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...