Malicious IPs in Uganda

IPv4 networks located in Uganda that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
41
#50 of 176 countries
Per million allocated IPv4
28.7
#14 of 77 countries
Flagged IPv4 addresses
60
ranges count at most as a /24
Allocated IPv4 addresses
1,427,200
RIR delegation statistics

Uganda at a glance

Uganda had 41 flagged IPv4 networks in the snapshot of 2026-10-10, rank #50 of 176 countries by absolute count. Relative to its allocated IPv4 space that is 28.7 flagged networks per million addresses, rank #14 of 77, 2.7 times the median of 10.6 across all rated countries. The largest category is brute force sources with 68% of the flagged networks, followed by other malicious networks (17%). The three networks (ASNs) with the most flagged IPs hold 76% of them, led by Uganda-Telecom - IDDQD-AS (AS21491).

Malicious activity in Uganda by category

A network listed in several categories counts once, in the most specific one.

  • Brute force sources in Uganda

    28 (68%)

    28 flagged networks, #44 of 159 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Other malicious networks in Uganda

    7 (17%)

    7 flagged networks, #64 of 147 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Botnet hosts in Uganda

    4 (10%)

    4 flagged networks, #59 of 126 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Spam sources in Uganda

    2 (5%)

    2 flagged networks, #43 of 85 countries for spam sources. Sources of email spam. Spam Sources by Country

Networks with the most flagged IPs in Uganda

Autonomous systems announcing the flagged networks located in Uganda.

#NetworkFlagged networks
1AS21491Uganda-Telecom - IDDQD-AS22
2AS37075Airtel Uganda Limited - Airtel Uganda Limited5
3AS328727Simba Fiber Africa Limited - Simba Fiber Africa Limited4
4AS20294MTN Uganda - MTN Uganda2
5AS30844LIQUID-AS Liquid Telecommunications Ltd2
6AS329415Savanna Fibre Limited - Savanna Fibre Limited2
7AS29032DATANET-UG - IDDQD-AS1
8AS36924GVA Cote d'Ivoire SAS - GVA Cote d'Ivoire SAS1
9AS37063Roke Investments International Ltd - Roke Investments International Ltd1
10AS328118East African Broadband Services Limited - East African Broadband Services Limited1

Compare Uganda with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Uganda by rate

#CountryNetworksPer million
12Philippines18830.0
13Azerbaijan2328.8
14Uganda4128.7
15Qatar2326.9
16Oman2425.2
17Moldova3023.8

Other countries in the AFRINIC region

#CountryNetworksPer million
6Ethiopia2567.5
18Tanzania2623.6
22Ghana4620.9
29Nigeria4614.3
40Kenya6510.4
49Algeria326.71
59South Africa1314.82
65Tunisia303.81

Questions about Uganda

How many malicious IP addresses are there in Uganda?
On 2026-10-10, 41 IPv4 networks (/24 blocks) located in Uganda were flagged for malicious activity, with 60 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
Which networks in Uganda host the most flagged IPs?
Uganda-Telecom - IDDQD-AS (AS21491, 22 networks), Airtel Uganda Limited - Airtel Uganda Limited (AS37075, 5 networks), Simba Fiber Africa Limited - Simba Fiber Africa Limited (AS328727, 4 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Uganda or anywhere else with one API call.