← Back to feed

AS6713 Itissalat Al-MAGHRIB

ASN Active medium
Why this campaign was detected
6 IPs from the same network (Itissalat Al-MAGHRIB, AS6713) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS6713 · Itissalat Al-MAGHRIB
Subnet
Country
🇲🇦 MA
Cloud Provider
Member Count
6 IPs
Below average
Total Events
159
Below average by volume
Started / Ended
2026-04-14 10:33 — ongoing
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
160.174.129.232 credential_harvester 56% 1x OSINT 109 1 ssh:bruteforce 2026-04-27 19:25 evidence →
196.92.7.247 malware_dropper 52% 1x OSINT 13 1 ssh:bruteforce 2026-04-27 08:35 evidence →
196.92.7.249 opportunistic_bruter 49% 1x OSINT 15 2 ssh:bruteforce 2026-04-27 08:35 evidence →
81.192.138.65 malware_dropper 47% 13 1 ssh:bruteforce adsl-65-138-192-81.adsl2.iam.net.ma 2026-04-26 14:35 evidence →
154.144.243.138 scanner 42% 2x OSINT 4 2 ssh:bruteforce 2026-04-27 19:03 evidence →
154.144.225.226 credential_probe 28% 1x OSINT 5 1 ssh:bruteforce 2026-04-27 08:35 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds