Malicious IPs in Nigeria

IPv4 networks located in Nigeria that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
39
#51 of 179 countries
Per million allocated IPv4
12.1
#30 of 76 countries
Flagged IPv4 addresses
301
ranges count at most as a /24
Allocated IPv4 addresses
3,219,200
RIR delegation statistics

Nigeria at a glance

Nigeria had 39 flagged IPv4 networks in the snapshot of 2026-10-11, rank #51 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 12.1 flagged networks per million addresses, rank #30 of 76. The largest category is brute force sources with 44% of the flagged networks, followed by botnet hosts (33%). The three networks (ASNs) with the most flagged IPs hold 31% of them, led by VCG-AS MTN NIGERIA Communication limited (AS29465). Another 2 flagged IPv6 networks are located in Nigeria.

Malicious activity in Nigeria by category

A network listed in several categories counts once, in the most specific one. Also flagged: 2 IPv6 networks.

Networks with the most flagged IPs in Nigeria

Autonomous systems announcing the flagged networks located in Nigeria.

#NetworkFlagged networks
1AS29465VCG-AS MTN NIGERIA Communication limited6
2AS14593SPACEX-STARLINK - Space Exploration Technologies Corporation4
3AS37540WINROCK-2
4AS135377UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED2
5AS36873VNL1-AS2
6AS36920KKON2
7AS37088VDT-AS2
8AS37209HYPERIA2
9AS37282MAINONE2
10AS37480Cobranet2

Questions about Nigeria

How many malicious IP addresses are there in Nigeria?
On 2026-10-11, 39 IPv4 networks (/24 blocks) located in Nigeria were flagged for malicious activity, with 301 listed IPv4 addresses and 2 IPv6 networks. Each /24 counts once, however many of its addresses are listed.
Which networks in Nigeria host the most flagged IPs?
VCG-AS MTN NIGERIA Communication limited (AS29465, 6 networks), SPACEX-STARLINK - Space Exploration Technologies Corporation (AS14593, 4 networks), WINROCK- (AS37540, 2 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Nigeria or anywhere else with one API call.