🇺🇬 Uganda: live cyber threat activity

Malicious IPs, malware and ransomware victims in Uganda.

48Malicious IPs listed#65 of 182 countries · 0.07% of the world
12New in the last 24hfirst seen by any feed
29Reported by 2+ feedsindependent sources agree
1Ransomware victimsposted in the last 30 days

View Uganda on the live map →All listed IPs in UgandaRansomware victims in Uganda

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C20
  2. Malware0
  3. Phishing0
  4. Attacker48

By state or region

  1. Central Region39
  2. Western Region7
  3. Northern Region2

By city

  1. Kampala18
  2. Kalisizo10
  3. Nansana7
  4. Mbarara2
  5. Mukono1
  6. Kitgum1
  7. Kyaka II Refugee Camp1
  8. Kyenjojo1
  9. Kyengera1
  10. Kasozi1
  11. Fort Portal1
  12. Kabale1
  13. Kajansi1
  14. Gulu1
  15. Bweyogerere1

Networks hosting the most

NetworkIPs
AS21491 Uganda Telecom 35
AS20294 MTN Uganda 5
AS327724 National Information Technology Authority Uganda 2
AS37075 Airtel Uganda Limited 2
AS328408 HAMILTON TELECOM LIMITED 1
AS37063 Roke Investments International Ltd 1
AS29032 DATANET LLC 1
AS328118 East African Broadband Services Limited 1

Malware families served from Uganda

No malware family attributed to IPs here.

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
196.0.107[.]98AttackerAttacking hostKalisizo, Central RegionAS21491 Uganda Telecom1 feed2026-10-12 08:20
196.0.10[.]162AttackerAttacking hostMbarara, Western RegionAS21491 Uganda Telecom2 feeds2026-10-12 04:35
196.0.107[.]106AttackerAttacking hostKalisizo, Central RegionAS21491 Uganda Telecom2 feeds2026-10-12 04:35
196.0.107[.]206AttackerAttacking hostKalisizo, Central RegionAS21491 Uganda Telecom2 feeds2026-10-12 04:35
196.0.107[.]210AttackerAttacking hostKalisizo, Central RegionAS21491 Uganda Telecom2 feeds2026-10-12 04:35
196.0.111[.]142AttackerAttacking hostKitgum, Northern RegionAS21491 Uganda Telecom2 feeds2026-10-12 04:35
196.0.122[.]122AttackerAttacking hostKyenjojo, Western RegionAS21491 Uganda Telecom2 feeds2026-10-12 04:35
196.0.124[.]146AttackerAttacking hostNansana, Central RegionAS21491 Uganda Telecom2 feeds2026-10-12 04:35
197.239.5[.]60AttackerAttacking hostKampala, Central RegionAS37075 Airtel Uganda Limited2 feeds2026-10-12 04:35
212.88.98[.]174AttackerAttacking hostNansana, Central RegionAS20294 MTN Uganda2 feeds2026-10-12 04:35
212.88.98[.]191AttackerAttacking hostNansana, Central RegionAS20294 MTN Uganda2 feeds2026-10-12 04:35
212.88.98[.]226AttackerAttacking hostNansana, Central RegionAS20294 MTN Uganda1 feed2026-10-11 21:25
102.134.140[.]192AttackerAttacking hostMukono, Central RegionAS328408 HAMILTON TELECOM LIMITED3 feeds2026-10-11 04:31
196.0.10[.]122AttackerAttacking hostMbarara, Western RegionAS21491 Uganda Telecom2 feeds2026-10-11 04:31
196.0.107[.]10AttackerAttacking hostKalisizo, Central RegionAS21491 Uganda Telecom2 feeds2026-10-11 04:31
196.0.107[.]102AttackerAttacking hostKalisizo, Central RegionAS21491 Uganda Telecom2 feeds2026-10-11 04:31
196.0.107[.]2AttackerAttacking hostKalisizo, Central RegionAS21491 Uganda Telecom2 feeds2026-10-11 04:31
196.0.107[.]246AttackerAttacking hostKalisizo, Central RegionAS21491 Uganda Telecom2 feeds2026-10-11 04:31
196.0.107[.]38AttackerAttacking hostKalisizo, Central RegionAS21491 Uganda Telecom2 feeds2026-10-11 04:31
196.0.12[.]14AttackerMalicious IPKampala, Central RegionAS21491 Uganda Telecom1 feed2026-10-11 04:31
196.0.124[.]130AttackerMalicious IPNansana, Central RegionAS21491 Uganda Telecom1 feed2026-10-11 04:31
196.0.14[.]10AttackerMalicious IPKampala, Central RegionAS21491 Uganda Telecom1 feed2026-10-11 04:31
196.0.24[.]238AttackerMalicious IPKampala, Central RegionAS21491 Uganda Telecom1 feed2026-10-11 04:31
197.239.15[.]58AttackerMalicious IPKajansi, Central RegionAS37075 Airtel Uganda Limited1 feed2026-10-11 04:31
154.72.195[.]50AttackerOn multiple blocklistsKampala, Central RegionAS327724 National Information Technology Authority Uganda1 feed2026-10-11 04:31

See every listed IP in Uganda →

Ransomware victims in Uganda

1 posted in the last 30 days, 1 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-09-24 22:23Armada Credit BureauSpiralsFinancial Services

All ransomware victims in Uganda →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →