Uganda (UG) Threat Intelligence

UG

Uganda has 2,216 malicious IP addresses with 79,838 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: MTN Uganda (490 IPs), ZAINUGAS (471 IPs), UGANDA-TELECOM Uganda Telecom (387 IPs). Data collected since 2025-10-13, last activity 2026-10-14.

Threat Assessment: Uganda exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by MTN Uganda and ZAINUGAS.

Total Reports
79,838
Unique IPs
2,216
First Seen
2025-10-13
Last Activity
2026-10-14

Top Threat Categories

Tcp Scan 9,142
Suspicious Activity 5,527
High Threat 4,083
Malware Distribution 2,317
Intrusion Attempt 638

Top Attacking Networks

AS20294 MTN Uganda
490 IPs
AS37075 ZAINUGAS
471 IPs
AS21491 UGANDA-TELECOM Uganda Telecom
387 IPs

Most Reported IPs in Uganda

41.220.3.101 1,413 reports
196.0.113.110 1,196 reports
196.0.107.158 1,121 reports
196.0.41.134 1,050 reports
196.0.3.188 1,040 reports

Access this data via API

Get Uganda threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/UG

View full API documentation

See how we classify and verify threats →

Check any IP from Uganda

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS20294 Intelligence AS37075 Intelligence AS21491 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...