Extreme Threat
IP 154.72.204.131 classified at threat level 10/10 with 42 documented attacks.
Advanced threat indicators confirmed with 78% certainty.
More threatening than 99% of monitored IPs
IP Address
154.72.204.131
IPv4
Public
UG
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Uganda
Location
National Information Tech...
ASN 327724
42
Reports
Honeypot
Data Source
Threat Categories
Hacking
29
SSH
27
Exploited Host
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Sporadic
Irregular burst activity pattern indicates intermittent use of a compromised system.
First Observed
7. September 2026
Last Activity
10. September 2026
Recent (7 days)
0 incidents
High-Risk Network Association
This IP belongs to a network (ASN 327724) with elevated threat levels. The ISP National Information Technology Authority Uganda hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Implement adaptive blocking rules.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
4/10
Low
Confidence Score
78%
Verified
Confidence History
8. Sep 2026 - 10. Sep 2026
78%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 154.72.204.131
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
UG
- ASN
- AS327724
- ISP
- National Information Technology Authority Uganda
DNS Information
- Reverse DNS
- host.upf.go.ug
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 42
- First Reported
- 7 Sep 2026
- Last Reported
- 10 Sep 2026, 11:24
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS327724
NITA
UG
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
3
Total IPs Monitored
10
Total Reports
3.3
Reports per IP
Network Context
This IP address belongs to NITA (AS327724), which manages 3 IP addresses in our monitoring system. Out of these, 10 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 813,729 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
42
avg: 9
++
Network Comparison
Compared against 8 IPs in ASN 327724
Threat Level
10/10
network avg: 9.1
=
Total Reports
42
network avg: 11
++
Network National Information Technology Authority Uganda has overall threat level 8/10
Geographic Comparison
Compared against 449 IPs in UG
Threat Level
10/10
country avg: 6.4
++
Total Reports
42
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
9 Sep 2026
24 reports
Daily Average
1.4
reports/day
Most Active
Wednesday
24 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
40
SSH
37
Exploited Host
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
739,755 threat incidents tracked globally • Last 24h: 43,994 Logs
FEED
Top Threat Sources
-
01
United States144,604 19.5% -
02
Brazil111,066 15%
-
03
India83,399 11.3%
-
04
China45,169 6.1%
-
05
SC29,242 4%
-
06
Germany17,739 2.4%
-
07
Netherlands17,586 2.4%
-
08
Pakistan16,939 2.3%
-
09
Argentina16,213 2.2%
-
10
Colombia15,149 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
7
Related IPs
9/10
Avg Threat
16%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
154.72.197.110
10/10
Confidence
41%
Reports
6
Location
UG
UG
154.72.201.206
10/10
Confidence
32%
Reports
5
Location
UG
UG
154.72.196.195
8/10
Confidence
21%
Reports
3
Location
UG
UG
154.72.217.242
10/10
Confidence
11%
Reports
4
Location
UG
UG
154.72.194.114
7/10
Confidence
6%
Reports
2
Location
UG
UG
154.72.210.54
8/10
Confidence
4%
Reports
15
Location
UG
UG
154.72.199.50
10/10
Confidence
0%
Reports
8
Location
UG
UG
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
66%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
137.63.168.196
10/10
Confidence
96%
Reports
30
ISP
Research and Ed...
102.203.209.56
8/10
Confidence
87%
Reports
9
ISP
Savanna Fibre L...
41.190.130.26
8/10
Confidence
82%
Reports
44
ISP
Liquid Telecomm...
41.190.134.37
8/10
Confidence
81%
Reports
23
ISP
Liquid Telecomm...
102.34.160.119
10/10
Confidence
79%
Reports
14
ISP
Research and Ed...
41.84.200.53
10/10
Confidence
74%
Reports
6
ISP
Bandwidth and C...
212.88.98.227
8/10
Confidence
67%
Reports
4
ISP
MTN Uganda
102.209.109.232
10/10
Confidence
63%
Reports
7
ISP
Savanna Fibre L...
102.211.168.99
8/10
Confidence
63%
Reports
6
ISP
C-SQUARED
137.63.142.58
10/10
Confidence
55%
Reports
4
ISP
Research and Ed...
41.84.193.110
10/10
Confidence
52%
Reports
10
ISP
BCS
41.210.157.214
10/10
Confidence
51%
Reports
3
ISP
MTN Uganda
196.250.64.146
10/10
Confidence
49%
Reports
6
ISP
GVA Cote d'Ivoi...
102.85.125.49
10/10
Confidence
45%
Reports
3
ISP
Airtel Uganda L...
102.85.143.42
10/10
Confidence
45%
Reports
3
ISP
Airtel Uganda L...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
78%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
51.68.207.118
10/10
Confidence
78%
Reports
15,934
Location
FR
FR
185.246.128.133
10/10
Confidence
78%
Reports
11,823
Location
SE
SE
66.132.172.169
10/10
Confidence
78%
Reports
7,776
Location
US
US
66.132.172.171
8/10
Confidence
78%
Reports
7,594
Location
US
US
176.65.149.67
10/10
Confidence
78%
Reports
7,539
Location
NL
NL
80.66.83.80
10/10
Confidence
78%
Reports
2,759
Location
RU
RU
179.51.153.37
8/10
Confidence
78%
Reports
2,314
Location
BR
BR
65.49.20.66
8/10
Confidence
78%
Reports
1,165
Location
US
US
64.62.156.66
8/10
Confidence
78%
Reports
1,062
Location
US
US
204.76.203.213
10/10
Confidence
78%
Reports
989
Location
NL
NL
65.49.1.142
8/10
Confidence
78%
Reports
956
Location
US
US
185.242.226.95
10/10
Confidence
78%
Reports
922
Location
US
US
168.110.195.99
10/10
Confidence
78%
Reports
908
Location
ID
ID
45.82.78.107
10/10
Confidence
78%
Reports
892
Location
DE
DE
185.242.226.104
10/10
Confidence
78%
Reports
867
Location
US
US