🇺🇾 Uruguay: live cyber threat activity

Malicious IPs, malware and ransomware victims in Uruguay.

14Malicious IPs listed#110 of 182 countries · 0.02% of the world
6New in the last 24hfirst seen by any feed
3Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Uruguay on the live map →All listed IPs in UruguayRansomware victims in Uruguay

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C20
  2. Malware3
  3. Phishing0
  4. Attacker11

By state or region

  1. Montevideo Department7
  2. Maldonado2
  3. Tacuarembó Department2
  4. Cerro Largo2
  5. Treinta y Tres Department1

By city

  1. Montevideo6
  2. Melo2
  3. Punta del Este1
  4. Maldonado1
  5. Abayuba1
  6. Paso de los Toros1
  7. Treinta y Tres1
  8. Tacuarembó1

Networks hosting the most

NetworkIPs
AS6057 Administracion Nacional de Telecomunicaciones 14

Malware families served from Uruguay

  1. Stop1
  2. Injuke1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
179.25.69[.]195AttackerMalicious IPPunta del Este, MaldonadoAS6057 Administracion Nacional de Telecomunicaciones1 feed2026-10-12 04:35
186.49.199[.]130AttackerAttacking hostMontevideo, Montevideo DepartmentAS6057 Administracion Nacional de Telecomunicaciones2 feeds2026-10-12 04:35
186.54.214[.]227AttackerMalicious IPMelo, Cerro LargoAS6057 Administracion Nacional de Telecomunicaciones1 feed2026-10-12 04:35
190.135.153[.]214AttackerMalicious IPTreinta y Tres, Treinta y Tres DepartmentAS6057 Administracion Nacional de Telecomunicaciones1 feed2026-10-12 04:35
190.133.5[.]80AttackerAttacking hostMelo, Cerro LargoAS6057 Administracion Nacional de Telecomunicaciones1 feed2026-10-12 04:05
167.62.18[.]48AttackerAttacking hostMontevideo, Montevideo DepartmentAS6057 Administracion Nacional de Telecomunicaciones1 feed2026-10-11 19:50
179.24.68[.]111AttackerMalicious IPMontevideo, Montevideo DepartmentAS6057 Administracion Nacional de Telecomunicaciones1 feed2026-10-11 04:31
186.49.250[.]207AttackerAttacking hostPaso de los Toros, Tacuarembó DepartmentAS6057 Administracion Nacional de Telecomunicaciones2 feeds2026-10-11 04:31
186.48.25[.]120MalwareInjukeAbayuba, Montevideo DepartmentAS6057 Administracion Nacional de Telecomunicaciones1 feed · 3 sandbox samples2026-10-10 10:39
186.48.28[.]96MalwareContacted by malwareMontevideo, Montevideo DepartmentAS6057 Administracion Nacional de Telecomunicaciones1 feed · 3 sandbox samples2026-10-07 11:48
179.26.197[.]215MalwareStopMaldonado, MaldonadoAS6057 Administracion Nacional de Telecomunicaciones1 feed · 2 sandbox samples2026-10-07 03:30
179.27.97[.]205AttackerAttacking hostMontevideo, Montevideo DepartmentAS6057 Administracion Nacional de Telecomunicaciones1 feed—
190.64.90[.]158AttackerAttacking hostMontevideo, Montevideo DepartmentAS6057 Administracion Nacional de Telecomunicaciones1 feed—
200.40.204[.]66AttackerCompromised hostTacuarembó, Tacuarembó DepartmentAS6057 Administracion Nacional de Telecomunicaciones3 feeds—

See every listed IP in Uruguay →

Ransomware victims in Uruguay

0 posted in the last 30 days, 3 in 90.

Sectors hit (30 days)

    Groups (30 days)

      Posted (UTC)VictimGroupSector
      2026-09-04 06:59Blanco & EtcheverrygunraProfessional Services
      2026-08-28 15:02VigiliaglobalTechnology
      2026-08-19 09:31Integraduanasqilin—

      All ransomware victims in Uruguay →

      Other countries

      🇺🇸 United States 17,780🇨🇳 China 10,826🇩🇪 Germany 4,209🇬🇧 United Kingdom 3,654🇷🇺 Russia 3,591🇳🇱 Netherlands 2,321🇮🇳 India 2,035🇫🇷 France 1,533🇧🇷 Brazil 1,402🇸🇬 Singapore 1,360🇰🇷 South Korea 1,328🇭🇰 Hong Kong 1,320🇮🇩 Indonesia 1,188🇨🇦 Canada 883🇵🇰 Pakistan 851🇧🇪 Belgium 757🇯🇵 Japan 735🇺🇦 Ukraine 675🇵🇱 Poland 560🇿🇦 South Africa 557🇲🇾 Malaysia 555🇻🇳 Vietnam 548🇮🇹 Italy 407🇸🇪 Sweden 383All countries →