Egypt (EG) Threat Intelligence

EG

Egypt has 21,545 malicious IP addresses with 551,021 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: TE Data (15,756 IPs), Vodafone Data (1,817 IPs), Link Egypt (Link.NET) (1,407 IPs). Data collected since 2023-04-06, last activity 2026-10-13.

Threat Assessment: Egypt shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by TE Data and Vodafone Data.

Total Reports
551,021
Unique IPs
21,545
First Seen
2023-04-06
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 46,312
Suspicious Activity 41,176
High Threat 15,955
Malware Distribution 8,095
Intrusion Attempt 6,534

Top Attacking Networks

AS8452 TE Data
15,756 IPs
AS24835 Vodafone Data
1,817 IPs
AS24863 Link Egypt (Link.NET)
1,407 IPs

Most Reported IPs in Egypt

197.199.224.52 1,608 reports
41.128.181.199 1,467 reports
197.44.15.210 1,314 reports
41.128.181.196 1,229 reports
41.65.118.172 1,174 reports

Access this data via API

Get Egypt threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/EG

View full API documentation

See how we classify and verify threats →

Check any IP from Egypt

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS8452 Intelligence AS24835 Intelligence AS24863 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...