Uganda (UG) Threat Intelligence

UG

Uganda has 2,063 malicious IP addresses with 74,281 abuse reports. Top threat categories include tcp scan, suspicious activity, malware distribution, high threat, intrusion attempt. Top attacking networks: MTN Uganda (445 IPs), ZAINUGAS (429 IPs), UGANDA-TELECOM Uganda Telecom (387 IPs). Data collected since 2025-10-13, last activity 2026-09-20.

Threat Assessment: Uganda exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are tcp scan, suspicious activity, malware distribution. The majority of threats originate from networks operated by MTN Uganda and ZAINUGAS.

Total Reports
74,281
Unique IPs
2,063
First Seen
2025-10-13
Last Activity
2026-09-20

Top Threat Categories

Tcp Scan 8,335
Suspicious Activity 4,544
Malware Distribution 1,976
High Threat 1,068
Intrusion Attempt 485

Top Attacking Networks

AS20294 MTN Uganda
445 IPs
AS37075 ZAINUGAS
429 IPs
AS21491 UGANDA-TELECOM Uganda Telecom
387 IPs

Most Reported IPs in Uganda

41.220.3.101 948 reports
196.0.113.110 877 reports
196.0.41.134 854 reports
196.0.107.158 849 reports
196.0.34.106 811 reports

Access this data via API

Get Uganda threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/UG

View full API documentation

See how we classify and verify threats →

Check any IP from Uganda

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS20294 Intelligence AS37075 Intelligence AS21491 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...