Ukraine (UA) Threat Intelligence

UA

Ukraine has 74,266 malicious IP addresses with 1,931,195 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: Kyivstar PJSC (4,200 IPs), LLC Eksintech (2,393 IPs), JSC Ukrtelecom (2,356 IPs). Data collected since 2023-07-04, last activity 2026-11-14.

Threat Assessment: Ukraine shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Kyivstar PJSC and LLC Eksintech.

Total Reports
1,931,195
Unique IPs
74,266
First Seen
2023-07-04
Last Activity
2026-11-14

Top Threat Categories

Tcp Scan 659,071
Suspicious Activity 234,781
High Threat 227,847
Malware Distribution 44,329
Intrusion Attempt 16,279

Top Attacking Networks

AS15895 Kyivstar PJSC
4,200 IPs
AS3255 LLC Eksintech
2,393 IPs
AS6849 JSC Ukrtelecom
2,356 IPs

Most Reported IPs in Ukraine

77.87.40.114 1,629 reports
79.143.45.75 1,502 reports
46.201.247.21 1,158 reports
78.30.250.62 983 reports
176.103.15.155 973 reports

Access this data via API

Get Ukraine threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/UA

View full API documentation

See how we classify and verify threats →

Check any IP from Ukraine

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS15895 Intelligence AS3255 Intelligence AS6849 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...