Ukraine (UA) Threat Intelligence

UA

Ukraine has 76,556 malicious IP addresses with 2,041,945 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: Kyivstar PJSC (4,382 IPs), LLC Eksintech (2,341 IPs), JSC Ukrtelecom (2,228 IPs). Data collected since 2023-07-04, last activity 2026-10-13.

Threat Assessment: Ukraine shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Kyivstar PJSC and LLC Eksintech.

Total Reports
2,041,945
Unique IPs
76,556
First Seen
2023-07-04
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 602,475
Suspicious Activity 206,025
High Threat 142,967
Malware Distribution 48,175
Intrusion Attempt 11,057

Top Attacking Networks

AS15895 Kyivstar PJSC
4,382 IPs
AS3255 LLC Eksintech
2,341 IPs
AS6849 JSC Ukrtelecom
2,228 IPs

Most Reported IPs in Ukraine

77.87.40.114 1,599 reports
79.143.45.75 1,374 reports
46.201.247.21 1,290 reports
78.30.250.62 1,157 reports
82.193.122.91 1,153 reports

Access this data via API

Get Ukraine threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/UA

View full API documentation

See how we classify and verify threats →

Check any IP from Ukraine

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS15895 Intelligence AS3255 Intelligence AS6849 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...