🇹🇿 Tanzania: live cyber threat activity

Malicious IPs, malware and ransomware victims in Tanzania.

24Malicious IPs listed#88 of 182 countries · 0.04% of the world

4New in the last 24hfirst seen by any feed

6Reported by 2+ feedsindependent sources agree

1Ransomware victimsposted in the last 30 days

View Tanzania on the live map →All listed IPs in Tanzania Ransomware victims in Tanzania

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Dar es Salaam Region16
Dodoma3
Pwani2
Mbeya1
Morogoro1
Arusha1

By city

Dar es Salaam16
Dodoma2
Mbeya1
Mwandege1
Ifakara1
Lugoba1
Kondoa1
Arusha1

Networks hosting the most

Network	IPs
AS33765 TANZANIA TELECOMMUNICATIONS CO. LTD	5
AS37182 Tanzania Education And Research Network	5
AS327885 Viettel Tanzania PLC	2
AS36908 Vodacom Tanzania Ltd	2
AS15399 Wananchi Group (K) LTD	1
AS329413 Kasi Networks Limited	1
AS328676 Zanzibar Information Communication Technology Infrastructure Agency (ZICTIA)	1
AS327795 e-Government Authority	1
AS37035 MIC TANZANIA LTD	1
AS30844 Liquid Telecommunications Ltd	1
AS37133 Airtel Tanzania	1
AS36965 WIA Tanzania	1
AS36909 Habari Node Public Limited	1
AS327706 Power and Network, Backup Company Ltd	1

Malware families served from Tanzania

No malware family attributed to IPs here.

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
154.74.159[.]8	Attacker	Attacking host	Mbeya, Mbeya	AS37035 MIC TANZANIA LTD	1 feed	2026-10-12 09:30
102.209.152[.]85	Attacker	Attacking host	Dar es Salaam, Dar es Salaam Region	AS329413 Kasi Networks Limited	1 feed	2026-10-12 08:55
196.249.122[.]124	Attacker	Attacking host	Mwandege, Pwani	AS327885 Viettel Tanzania PLC	2 feeds	2026-10-12 04:35
41.93.32[.]116	Attacker	Attacking host	Dar es Salaam, Dar es Salaam Region	AS37182 Tanzania Education And Research Network	1 feed	2026-10-12 04:35
197.186.19[.]223	Attacker	Malicious IP	Ifakara, Morogoro	AS37133 Airtel Tanzania	1 feed	2026-10-11 04:31
154.118.226[.]98	Attacker	Attacking host	Dar es Salaam, Dar es Salaam Region	AS327795 e-Government Authority	1 feed	2026-10-10 04:30
102.214.44[.]117	Attacker	Attacking host	Dodoma, Dodoma	AS328676 Zanzibar Information Communication Technology Infrastructure Agency (ZICTIA)	2 feeds	2026-10-09 04:27
41.59.67[.]142	Attacker	Malicious IP	Dar es Salaam, Dar es Salaam Region	AS33765 TANZANIA TELECOMMUNICATIONS CO. LTD	1 feed	2026-10-09 04:27
41.221.49[.]85	Attacker	Attacking host	Dar es Salaam, Dar es Salaam Region	AS36965 WIA Tanzania	3 feeds	2026-10-09 04:27
41.78.169[.]229	Attacker	Attacking host	Arusha, Arusha	AS36909 Habari Node Public Limited	1 feed	2026-10-09 04:27
102.206.16[.]178	Attacker	Attacking host	Dodoma, Dodoma	AS15399 Wananchi Group (K) LTD	1 feed	—
169.255.187[.]234	Attacker	Attacking host	Dar es Salaam, Dar es Salaam Region	AS327885 Viettel Tanzania PLC	1 feed	—
196.41.46[.]194	Attacker	Compromised host	Dar es Salaam, Dar es Salaam Region	AS30844 Liquid Telecommunications Ltd	1 feed	—
197.250.101[.]13	Attacker	Attacking host	Lugoba, Pwani	AS36908 Vodacom Tanzania Ltd	1 feed	—
197.250.36[.]206	Attacker	Attacking host	Dar es Salaam, Dar es Salaam Region	AS36908 Vodacom Tanzania Ltd	1 feed	—
41.59.200[.]166	Attacker	Attacking host	Dar es Salaam, Dar es Salaam Region	AS33765 TANZANIA TELECOMMUNICATIONS CO. LTD	2 feeds	—
41.59.202[.]241	Attacker	Attacking host	Kondoa, Dodoma	AS33765 TANZANIA TELECOMMUNICATIONS CO. LTD	1 feed	—
41.59.82[.]183	Attacker	On multiple blocklists	Dar es Salaam, Dar es Salaam Region	AS33765 TANZANIA TELECOMMUNICATIONS CO. LTD	aggregated list	—
41.59.99[.]40	Attacker	Attacking host	Dar es Salaam, Dar es Salaam Region	AS33765 TANZANIA TELECOMMUNICATIONS CO. LTD	1 feed	—
41.93.28[.]11	Attacker	On multiple blocklists	Dar es Salaam, Dar es Salaam Region	AS37182 Tanzania Education And Research Network	1 feed	—
41.93.28[.]23	Attacker	Attacking host	Dar es Salaam, Dar es Salaam Region	AS37182 Tanzania Education And Research Network	2 feeds	—
41.93.28[.]9	Attacker	On multiple blocklists	Dar es Salaam, Dar es Salaam Region	AS37182 Tanzania Education And Research Network	aggregated list	—
41.93.82[.]201	Attacker	Attacking host	Dar es Salaam, Dar es Salaam Region	AS37182 Tanzania Education And Research Network	2 feeds	—
154.73.64[.]24	Malware	Malicious URL	Dar es Salaam, Dar es Salaam Region	AS327706 Power and Network, Backup Company Ltd	aggregated list	—