Egypt (EG) Threat Intelligence

EG

Egypt has 16,887 malicious IP addresses with 486,801 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: TE Data (12,052 IPs), Vodafone Data (1,487 IPs), Link Egypt (Link.NET) (1,162 IPs). Data collected since 2023-04-06, last activity 2026-08-15.

Threat Assessment: Egypt shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by TE Data and Vodafone Data.

Total Reports
486,801
Unique IPs
16,887
First Seen
2023-04-06
Last Activity
2026-08-15

Top Threat Categories

Suspicious Activity 23,571
Severe Abuse 2,108
Moderate Threat 815
High Threat 671
Ssh Bruteforce 382

Top Attacking Networks

AS8452 TE Data
12,052 IPs
AS24835 Vodafone Data
1,487 IPs
AS24863 Link Egypt (Link.NET)
1,162 IPs

Most Reported IPs in Egypt

41.128.181.199 664 reports
197.199.224.52 657 reports
197.44.15.210 646 reports
41.128.181.196 614 reports
41.65.118.172 594 reports

Access this data via API

Get Egypt threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/EG

View full API documentation

See how we classify and verify threats →

Check any IP from Egypt

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS8452 Intelligence AS24835 Intelligence AS24863 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...