IOC Radar
IPHighVerifiedSignal 34/100

105.72.62.61

Location
MoroccoMorocco
Rabat, Rabat-Salé-Kénitra
ASN
AS36884
Provider 36884 Wana Corporate
First Seen
Feb 23, 2026
Last Seen
Feb 23, 2026
Feb 23
First Seen
122d ago
Feb 23
Last Seen
122d ago
2
Reports
source reports
34%
Confidence
high
Found in 2 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
34%
Signal Score
34 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

10 techniques

Network Information

CountryMAMorocco
RegionRabat, Rabat-Salé-Kénitra
ASNAS36884
OrganizationProvider 36884 Wana Corporate

Feed Intelligence Summary

2 reports34% confidence
2
Source reports
34%
Confidence score
Category tags
active scanactive scanningafricabad web botbotnet activitybrute forcebrute force attackcredential accesscredential stuffingddosdenial of serviceexploitation activityidentity & access exploitationindicatormamorocconetworkpassword attacksreconnaissanceresearchedscannert1110.001t1110.002t1110.003t1110.004t1190t1203t1499.001t1595.001t1595.002t1595.003web application attackweb exploitation

Activity Timeline

1 total obs
Feb 23Feb 23

Threat Activity Heatmap

· Peak: 2026-02-23
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreLow Risk
34
SIGNAL
Signal Score
34%
Confidence
2
Reports
First seenFeb 23, 2026
Last seenFeb 23, 2026
Verified IOC
GeolocationMA
CountryMorocco
LocationRabat, Rabat-Salé-Kénitra
ASNAS36884
OrgProvider 36884 Wana Corporate
Coords34.0072, -6.8407

VirusTotal

Not checked

WHOIS

raw
inetnum: 105.72.0.0 - 105.72.127.255 netname: INWI-FTTH001 descr: This pool is dedicated to Internet FTTH customers country: MA admin-c: AN2-AFRINIC tech-c: AN2-AFRINIC status: ASSIGNED PA mnt-by: MCNET-MNT source: AFRINIC # Filtered parent: 105.64.0.0 - 105.79.255.255 person: Ahmed NASSIRI address: Angle Rue oumayma sayeh et mansour saadi quartier racine residence courteline casablanca phone: tel:+212-959230 fax-no: tel:+212-390552 nic-hdl: AN2-AFRINIC mnt-by: GENERATED-GITFZQSVE3WJQO8RJEYP2ZAVNCAKGASA-MNT source: AFRINIC # Filtered route: 105.64.0.0/12 descr: Provider 36884 Wana Corporate origin: AS36884 mnt-by: MCNET-MNT source: AFRINIC # Filtered

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 4 months ago · Last seen 4 months ago
Appeared in 2 threat reports