🇳🇬 Nigeria: live cyber threat activity

Malicious IPs, malware and ransomware victims in Nigeria.

73Malicious IPs listed#54 of 182 countries · 0.11% of the world
12New in the last 24hfirst seen by any feed
34Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Nigeria on the live map →All listed IPs in NigeriaRansomware victims in Nigeria

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C20
  2. Malware3
  3. Phishing0
  4. Attacker70

By state or region

  1. Lagos63
  2. Akwa Ibom State5
  3. FCT2
  4. Oyo State1
  5. Rivers State1
  6. Niger State1

By city

  1. Lagos52
  2. Uyo5
  3. Ikoyi3
  4. Abuja2
  5. Lekki2
  6. Ibadan1
  7. Ikeja1
  8. Ifako1
  9. Rumuodomaya1
  10. Festac Town1
  11. Ikotun1
  12. Babana1
  13. Shomolu1
  14. Obalende1

Networks hosting the most

NetworkIPs
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 33
AS29465 MTN NIGERIA Communication limited 8
AS329244 Connect, Surf and Smile Limited 5
AS14593 Space Exploration Technologies Corporation 5
AS37540 Winrock Nigeria Limited 4
AS37480 Cobranet Limited 3
AS37148 Globacom Limited 2
AS30988 Accelon 1
AS37662 West Indian Ocean Cable Company 1
AS328658 De Choicetech Integrated Ltd 1
AS328722 Ciudad Infrastructure Limited 1
AS37340 SPECTRANET LIMITED 1
AS327898 CBC EMEA LTD 1
AS29286 SKYLOGIC S.P.A. 1
AS29091 ipNX Nigeria Limited 1

Malware families served from Nigeria

  1. Sality1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
102.91.132[.]96AttackerAttacking hostAbuja, FCTAS29465 MTN NIGERIA Communication limited1 feed2026-10-12 08:20
102.212.40[.]227AttackerAttacking hostUyo, Akwa Ibom StateAS329244 Connect, Surf and Smile Limited2 feeds2026-10-12 04:35
102.212.40[.]229AttackerMalicious IPUyo, Akwa Ibom StateAS329244 Connect, Surf and Smile Limited1 feed2026-10-12 04:35
102.212.40[.]231AttackerAttacking hostUyo, Akwa Ibom StateAS329244 Connect, Surf and Smile Limited2 feeds2026-10-12 04:35
197.211.58[.]217AttackerAttacking hostBabana, Niger StateAS37148 Globacom Limited2 feeds2026-10-12 04:35
41.86.151[.]22AttackerAttacking hostIkoyi, LagosAS37480 Cobranet Limited3 feeds2026-10-12 04:35
98.97.79[.]34AttackerAttacking hostLagos, LagosAS14593 Space Exploration Technologies Corporation3 feeds2026-10-12 04:35
102.212.40[.]234AttackerMalicious IPUyo, Akwa Ibom StateAS329244 Connect, Surf and Smile Limited1 feed2026-10-12 04:35
152.32.140[.]12AttackerAttacking hostLagos, LagosAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED1 feed2026-10-12 04:35
102.221.237[.]6AttackerAttacking hostLekki, LagosAS328722 Ciudad Infrastructure Limited1 feed2026-10-11 21:26
41.86.151[.]243MalwareSalityIkoyi, LagosAS37480 Cobranet Limited1 feed · 4 sandbox samples2026-10-11 12:44
41.76.82[.]82AttackerAttacking hostObalende, LagosAS37209 Hyperia Limited1 feed2026-10-11 11:35
135.129.124[.]114AttackerAttacking hostLagos, LagosAS14593 Space Exploration Technologies Corporation1 feed2026-10-11 08:35
129.222.206[.]39AttackerAttacking hostLagos, LagosAS14593 Space Exploration Technologies Corporation2 feeds2026-10-11 04:31
152.32.140[.]20AttackerMalicious IPLagos, LagosAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED1 feed2026-10-11 04:31
154.118.45[.]104AttackerMalicious IPFestac Town, LagosAS37340 SPECTRANET LIMITED1 feed2026-10-11 04:31
2605[:]59c0[:]eeb[:]1410[:]34ae[:]7932[:]6b79[:]a267AttackerAttacking hostLagos, LagosAS14593 Space Exploration Technologies Corporation2 feeds2026-10-11 04:31
197.211.32[.]242AttackerAttacking hostLagos, LagosAS37148 Globacom Limited2 feeds2026-10-11 04:30
102.220.45[.]186AttackerAttacking hostAbuja, FCTAS37540 Winrock Nigeria Limited2 feeds2026-10-10 12:25
197.234.42[.]162AttackerAttacking hostLagos, LagosAS29286 SKYLOGIC S.P.A.1 feed2026-10-10 04:30
102.212.40[.]228AttackerMalicious IPUyo, Akwa Ibom StateAS329244 Connect, Surf and Smile Limited2 feeds2026-10-09 12:40
152.32.142[.]86AttackerMalicious IPLagos, LagosAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2 feeds2026-10-09 06:30
102.209.29[.]131AttackerAttacking hostIbadan, Oyo StateAS37662 West Indian Ocean Cable Company2 feeds2026-10-09 04:27
102.220.173[.]146AttackerAttacking hostIkeja, LagosAS328658 De Choicetech Integrated Ltd3 feeds2026-10-09 04:27
143.105.112[.]145AttackerAttacking hostLagos, LagosAS14593 Space Exploration Technologies Corporation2 feeds2026-10-09 04:27

See every listed IP in Nigeria →

Ransomware victims in Nigeria

0 posted in the last 30 days, 5 in 90.

Sectors hit (30 days)

    Groups (30 days)

      Posted (UTC)VictimGroupSector
      2026-08-08 19:21Daily TrustPanzerOther
      2026-08-02 14:24nigeria.asa-international.comkrybitProfessional Services
      2026-07-26 10:24Zenith Bank PlcExfilSquadFinancial Services
      2026-07-25 12:58Jubilee JobsqilinProfessional Services
      2026-07-14 20:09I-FITNESSarcusmediaRetail & E-Commerce

      All ransomware victims in Nigeria →

      Other countries

      🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →