Ukraine (UA) Threat Intelligence

UA

Ukraine has 29,398 malicious IP addresses with 761,845 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: Kyivstar PJSC (2,133 IPs), CHP Zarko Alexandr Ivanovich (1,026 IPs), Radio Service Ltd. (870 IPs). Data collected since 2023-07-04, last activity 2026-04-06.

Threat Assessment: Ukraine shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Kyivstar PJSC and CHP Zarko Alexandr Ivanovich.

Total Reports
761,845
Unique IPs
29,398
First Seen
2023-07-04
Last Activity
2026-04-06

Top Threat Categories

Suspicious Activity 44,928
Severe Abuse 4,510
Moderate Threat 3,012
High Threat 1,751
Ssh Bruteforce 740

Top Attacking Networks

AS15895 Kyivstar PJSC
2,133 IPs
AS56812 CHP Zarko Alexandr Ivanovich
1,026 IPs
AS62384 Radio Service Ltd.
870 IPs

Most Reported IPs in Ukraine

185.156.73.233 567 reports
77.87.40.114 245 reports
81.30.162.18 233 reports
159.224.132.77 222 reports
193.176.251.229 216 reports

Access this data via API

Get Ukraine threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/UA

View full API documentation

See how we classify and verify threats →

Check any IP from Ukraine

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS15895 Intelligence AS56812 Intelligence AS62384 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...