Elevated Risk
IP 77.83.39.249 is a medium-to-high-risk address originating from Ukrainian hosting provider Kprohost LLC with a threat assessment of 7/10 and a substantial abuse history of 1,106 reports from automated honeypot sensors within a two-month window spanning February to March 2026. The dominant threat vectors are email spam distribution and general hacking activity, with the former accounting for the majority of recent reports. Despite a moderate confidence score of 67%, the sheer volume of abuse reports warrants serious consideration for any organization with exposed email or network services.
The detection data reveals concentrated malicious activity originating from this address across 20 separate automated honeypot sensors. The reported attack patterns include SMTP spam and abuse activity, accompanied by Suricata alerts flagging malformed TCP stream packets with broken acknowledgment sequences. This signature is consistent with reconnaissance techniques, evasion attempts, or attempts to exploit state-tracking mechanisms in vulnerable mail infrastructure. The network operator, Kprohost LLC operating under ASN AS214940, is a known Ukrainian hosting entity, and while this geographic context alone does not indicate malicious intent, the combination of hosting infrastructure and confirmed abuse patterns elevates the risk profile considerably. The near-zero activity frequency metric suggests burst-style engagement rather than persistent scanning, which may indicate targeted rather than opportunistic operations.
The email spam threat category represents a concrete risk to organizational assets, as mass distribution of unwanted messages can damage sender reputation, overload mail systems, and serve as a delivery mechanism for phishing or malware payloads. The hacking activity reported alongside the spam operations compounds this risk, as the same infrastructure may be conducting simultaneous intrusion attempts or vulnerability probing. The observed malformed packet patterns indicate that the operator possesses sufficient technical sophistication to craft non-standard network traffic, which security appliances that rely solely on signature-based detection may fail to identify effectively.
FR 
GB 
KR