🇷🇼 Rwanda: live cyber threat activity

Malicious IPs, malware and ransomware victims in Rwanda.

3Malicious IPs listed#145 of 182 countries · 0% of the world
0New in the last 24hfirst seen by any feed
1Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Rwanda on the live map →All listed IPs in Rwanda

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C20
  2. Malware0
  3. Phishing0
  4. Attacker3

By state or region

  1. Kigali3

By city

  1. Kigali2
  2. Ndera1

Networks hosting the most

NetworkIPs
AS36924 GVA Cote d'Ivoire SAS 1
AS37006 Liquid Telecommunication Rwanda Limited 1
AS37228 KT RWANDA NETWORK Ltd 1

Malware families served from Rwanda

No malware family attributed to IPs here.

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
102.22.141[.]136AttackerAttacking hostNdera, KigaliAS36924 GVA Cote d'Ivoire SAS1 feed2026-10-09 04:27
197.243.14[.]52AttackerAttacking hostKigali, KigaliAS37228 KT RWANDA NETWORK Ltd2 feeds2026-10-09 04:27
196.216.81[.]126AttackerAttacking hostKigali, KigaliAS37006 Liquid Telecommunication Rwanda Limited1 feed—

See every listed IP in Rwanda →

Ransomware victims in Rwanda

No ransomware victims from Rwanda posted in the last 90 days.

Other countries