Ukraine (UA) Threat Intelligence

UA

Ukraine has 26,926 malicious IP addresses with 709,998 abuse reports. Top threat categories include ssh bruteforce, web attack, generic bruteforce, web scanner, repeat offender. Top attacking networks: Kyivstar PJSC (2,103 IPs), CHP Zarko Alexandr Ivanovich (878 IPs), Rices Privately owned enterprise (835 IPs). Data collected since 2023-07-04, last activity 2026-04-16.

Threat Assessment: Ukraine shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, web attack, generic bruteforce. The majority of threats originate from networks operated by Kyivstar PJSC and CHP Zarko Alexandr Ivanovich.

Total Reports
709,998
Unique IPs
26,926
First Seen
2023-07-04
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 502
Web Attack 50
Generic Bruteforce 15
Web Scanner 15
Repeat Offender 8

Top Attacking Networks

AS15895 Kyivstar PJSC
2,103 IPs
AS56812 CHP Zarko Alexandr Ivanovich
878 IPs
AS48693 Rices Privately owned enterprise
835 IPs

Most Reported IPs in Ukraine

185.156.73.233 376 reports
77.87.40.114 266 reports
193.176.251.229 230 reports
5.59.107.59 221 reports
46.30.161.197 220 reports

Access this data via API

Get Ukraine threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/UA

View full API documentation

See how we classify and verify threats →

Check any IP from Ukraine

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS15895 Intelligence AS56812 Intelligence AS48693 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...