No Threats
No security incidents recorded for IP 154.72.201.206. Clean reputation.
No malicious patterns identified. Consistent with legitimate use.
IP Address
154.72.201.206
IPv4
Public
UG
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
UG
Location
NITA
ASN 327724
2
Reports
Honeypot
Data Source
Threat Categories
Hacking
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
16. May 2026
Last Activity
16. May 2026
Recent (7 days)
0 incidents
High-Risk Network Association
This IP belongs to a network (ASN 327724) with elevated threat levels. The ISP NITA hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Can be treated as trustworthy. Normal security practices apply.
Long-term blocking recommended.
Reputation Summary
Threat Level
0/10
No Threat
Low
Activity Frequency
2/10
Very Low
Confidence Score
29%
Medium Confidence
Confidence History
22. Jan 2026 - 16. May 2026
35%
Current
Stable
Trend
Security Reports (2)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 154.72.201.206
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
UG
- ASN
- AS327724
- ISP
- NITA
DNS Information
- Reverse DNS
- hce.gou.go.ug
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 2
- First Reported
- 22 Jan 2026
- Last Reported
- 16 May 2026, 03:12
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS327724
NITA
UG
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
3
Total IPs Monitored
10
Total Reports
3.3
Reports per IP
Network Context
This IP address belongs to NITA (AS327724), which manages 3 IP addresses in our monitoring system. Out of these, 10 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
0
%
Global Threat Ranking
This IP is more threatening than 0% of all IPs in our database.
Low Threat PercentileGlobal Comparison
Compared against 199,547 reported IPs worldwide
Threat Level
0/10
avg: 5.3
--
Total Reports
2
avg: 23
--
Network Comparison
Compared against 3 IPs in ASN 327724
Threat Level
0/10
network avg: 6.0
--
Total Reports
2
network avg: 8
--
Network NITA has overall threat level 8/10
Geographic Comparison
Compared against 157 IPs in UG
Threat Level
0/10
country avg: 5.7
--
Total Reports
2
country avg: 10
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
16 May 2026
1 reports
Daily Average
0
reports/day
Most Active
Thursday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,269 threat incidents tracked globally • Last 24h: 19,041 Logs
FEED
Top Threat Sources
-
01
United States38,456 20.5% -
02
India29,090 15.5% -
03
China26,026 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
2
Related IPs
9/10
Avg Threat
64%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
73%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
129.205.2.18
10/10
Confidence
98%
Reports
13
ISP
Roke Investment...
196.0.3.188
10/10
Confidence
98%
Reports
12
ISP
UGANDA-TELECOM ...
196.0.120.211
10/10
Confidence
90%
Reports
117
ISP
UGANDA-TELECOM ...
154.72.210.54
8/10
Confidence
90%
Reports
15
ISP
NITA
196.0.120.6
10/10
Confidence
87%
Reports
81
ISP
UGANDA-TELECOM ...
102.218.89.110
10/10
Confidence
75%
Reports
956
ISP
SIL6-AS
45.221.74.234
10/10
Confidence
74%
Reports
49
ISP
SIMBANET-AS
129.205.24.199
8/10
Confidence
67%
Reports
8
ISP
Roke Investment...
41.190.134.37
8/10
Confidence
67%
Reports
8
ISP
Liquid Telecomm...
102.203.209.211
8/10
Confidence
62%
Reports
5
ISP
Savanna-Fibre-L...
41.84.202.25
8/10
Confidence
60%
Reports
18
ISP
BCS
102.209.109.181
0/10
Confidence
57%
Reports
3
ISP
Savanna-Fibre-L...
129.205.16.50
10/10
Confidence
56%
Reports
5
ISP
Roke Investment...
41.84.193.110
10/10
Confidence
54%
Reports
8
ISP
BCS
154.0.131.67
10/10
Confidence
54%
Reports
5
ISP
Roke Investment...
IPs with similar threat level and confidence scores.
15
Related IPs
8/10
Avg Threat
35%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.242.226.91
8/10
Confidence
35%
Reports
427
Location
US
US
165.154.138.3
8/10
Confidence
35%
Reports
81
Location
DE
DE
165.154.11.37
7/10
Confidence
35%
Reports
79
Location
NG
NG
195.184.76.192
8/10
Confidence
35%
Reports
71
Location
US
US
143.198.238.84
8/10
Confidence
35%
Reports
30
Location
US
US
169.150.203.245
10/10
Confidence
35%
Reports
30
Location
US
US
114.119.133.204
8/10
Confidence
35%
Reports
28
Location
SG
SG
185.220.101.29
8/10
Confidence
35%
Reports
23
Location
DE
DE
162.144.234.153
8/10
Confidence
35%
Reports
22
Location
US
US
2a03:2880:f814:33::
8/10
Confidence
35%
Reports
14
Location
US
US
185.223.152.38
8/10
Confidence
35%
Reports
12
Location
US
US
2a03:2880:f814:9::
8/10
Confidence
35%
Reports
11
Location
US
US
185.209.196.248
7/10
Confidence
35%
Reports
10
Location
DE
DE
49.149.73.108
8/10
Confidence
35%
Reports
9
Location
PH
PH
185.223.152.44
8/10
Confidence
35%
Reports
9
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203