Malicious IPs in Morocco

IPv4 networks located in Morocco that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
32
#60 of 179 countries
Per million allocated IPv4
2.61
#70 of 76 countries
Flagged IPv4 addresses
43
ranges count at most as a /24
Allocated IPv4 addresses
12,274,176
RIR delegation statistics

Morocco at a glance

Morocco had 32 flagged IPv4 networks in the snapshot of 2026-10-11, rank #60 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 2.61 flagged networks per million addresses, rank #70 of 76, well below the median of 9.38 across all rated countries. The largest category is brute force sources with 56% of the flagged networks, followed by other malicious networks (25%). The three networks (ASNs) with the most flagged IPs hold 97% of them, led by MAROCCONNECT (AS36884).

Malicious activity in Morocco by category

A network listed in several categories counts once, in the most specific one.

  • Brute force sources in Morocco

    18 (56%)

    18 flagged networks, #55 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Other malicious networks in Morocco

    8 (25%)

    8 flagged networks, #60 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Botnet hosts in Morocco

    4 (13%)

    4 flagged networks, #60 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Scanners in Morocco

    1 (3%)

    1 flagged network, #29 of 40 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country

  • Spam sources in Morocco

    1 (3%)

    1 flagged network, #54 of 89 countries for spam sources. Sources of email spam. Spam Sources by Country

Networks with the most flagged IPs in Morocco

Autonomous systems announcing the flagged networks located in Morocco.

#NetworkFlagged networks
1AS36884MAROCCONNECT13
2AS6713IAM-AS12
3AS36925ASMedi6
4AS137409GSLNETWORKS-AS-AP GSL Networks Pty LTD1

Compare Morocco with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Morocco by rate

#CountryNetworksPer million
68Egypt672.77
69Australia1332.75
70Morocco322.61
71United Kingdom3202.26
72Switzerland522.23
73Austria211.88

Other countries in the AFRINIC region

#CountryNetworksPer million
6Ethiopia2259.4
13Uganda3725.9
14Tanzania2825.4
24Ghana4018.1
30Nigeria3912.1
33Kenya6710.7
45Algeria377.76
56South Africa1314.82

Questions about Morocco

How many malicious IP addresses are there in Morocco?
On 2026-10-11, 32 IPv4 networks (/24 blocks) located in Morocco were flagged for malicious activity, with 43 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
Which networks in Morocco host the most flagged IPs?
MAROCCONNECT (AS36884, 13 networks), IAM-AS (AS6713, 12 networks), ASMedi (AS36925, 6 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Morocco or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Morocco