Uganda (UG) Threat Intelligence

UG

Uganda has 895 malicious IP addresses with 32,489 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, repeat offender, web attack. Top attacking networks: tangerine-ug-as (194 IPs), ZAINUGAS (166 IPs), MTN (143 IPs). Data collected since 2025-12-06, last activity 2026-04-16.

Threat Assessment: Uganda has a relatively low level of observed cyber threat activity. The dominant attack types are ssh bruteforce, generic bruteforce, repeat offender. The majority of threats originate from networks operated by tangerine-ug-as and ZAINUGAS.

Total Reports
32,489
Unique IPs
895
First Seen
2025-12-06
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 105
Generic Bruteforce 17
Repeat Offender 4
Web Attack 1

Top Attacking Networks

AS37113 tangerine-ug-as
194 IPs
AS37075 ZAINUGAS
166 IPs
AS20294 MTN
143 IPs

Most Reported IPs in Uganda

196.0.120.6 258 reports
196.0.120.211 254 reports
102.218.89.110 252 reports
129.205.2.18 232 reports
45.221.74.234 231 reports

Access this data via API

Get Uganda threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/UG

View full API documentation

See how we classify and verify threats →

Check any IP from Uganda

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS37113 Intelligence AS37075 Intelligence AS20294 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...