IOC Radar
IPMediumSignal 48/100

105.69.52.171

Location
MoroccoMorocco
Marrakesh, Marrakesh-Safi
ASN
AS36884
Wana Corporate
First Seen
Apr 15, 2026
Last Seen
Apr 23, 2026
Apr 15
First Seen
66d ago
Apr 23
Last Seen
59d ago
6
Reports
source reports
48%
Confidence
medium
Found in 6 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
48%
Signal Score
48 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryMAMorocco
RegionMarrakesh, Marrakesh-Safi
ASNAS36884
OrganizationWana Corporate

Feed Intelligence Summary

6 reports48% confidence
6
Source reports
48%
Confidence score
Category tags
africaexploitation activityimapimap attackindicatormorocconetworkresearchedsmtpsmtp attacker

Activity Timeline

1 total obs
Apr 23Apr 23

Threat Activity Heatmap

· Peak: 2026-04-23
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
48
SIGNAL
Signal Score
48%
Confidence
6
Reports
First seenApr 15, 2026
Last seenApr 23, 2026
GeolocationMA
CountryMorocco
LocationMarrakesh, Marrakesh-Safi
ASNAS36884
OrgWana Corporate
Coords32.0000, -5.0000

VirusTotal

Not checked

WHOIS

description
The following is the full list of names given to Vye32GsS2g38eKhmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA
raw
inetnum: 105.64.0.0 - 105.79.255.255 netname: WANA-INWI-IPv4-2014 descr: Wana Corporate country: MA org: ORG-MC5-AFRINIC admin-c: HE9-AFRINIC tech-c: HE9-AFRINIC status: ALLOCATED PA mnt-by: AFRINIC-HM-MNT mnt-lower: MCNET-MNT mnt-domains: MCNET-MNT source: AFRINIC # Filtered parent: 105.0.0.0 - 105.255.255.255 organisation: ORG-MC5-AFRINIC org-name: Wana Corporate org-type: LIR country: MA address: Lotissement La Colline II - Lot. 1 - 2 - Sidi Maârouf address: Casablanca 20190 phone: tel:+212-5290-00000 fax-no: tel:+212-5290-00610 admin-c: HE9-AFRINIC tech-c: HE9-AFRINIC mnt-ref: AFRINIC-HM-MNT mnt-ref: MCNET-MNT mnt-by: AFRINIC-HM-MNT source: AFRINIC # Filtered person: Hassan Elmansouri address: Lotissement La Colline II - Lot 1 et 2 Sidi Maarouf phone: tel:+212-5290-00000 nic-hdl: HE9-AFRINIC mnt-by: GENERATED-ZC4BQXQQZWNYOHFUBNFHDRV4CONR4FIV-MNT source: AFRINIC # Filtered route: 105.64.0.0/12 descr: Provider 36884 Wana Corporate origin: AS36884 mnt-by: MCNET-MNT source: AFRINIC # Filtered

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 1 month ago
Appeared in 6 threat reports