Malicious IPs in Estonia
IPv4 networks located in Estonia that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
Estonia at a glance
Estonia had 15 flagged IPv4 networks in the snapshot of 2026-10-11, rank #84 of 179 countries by absolute count. Estonia has too little allocated IPv4 space for a meaningful per-million rate, so it is ranked by absolute count only. The largest category is brute force sources with 67% of the flagged networks, followed by botnet hosts (20%). The three networks (ASNs) with the most flagged IPs hold 53% of them, led by ESTPAK Telia Eesti AS (AS3249).
Malicious activity in Estonia by category
A network listed in several categories counts once, in the most specific one.
Brute force sources in Estonia
10 (67%)10 flagged networks, #75 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
Botnet hosts in Estonia
3 (20%)3 flagged networks, #69 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
C2 servers in Estonia
1 (7%)1 flagged network, #34 of 51 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country
Other malicious networks in Estonia
1 (7%)1 flagged network, #118 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country
Networks with the most flagged IPs in Estonia
Autonomous systems announcing the flagged networks located in Estonia.
| # | Network | Flagged networks |
|---|---|---|
| 1 | AS3249ESTPAK Telia Eesti AS | 5 |
| 2 | AS202652ELEVI-AS Elevi AS | 2 |
| 3 | AS206804EstNOC-GLOBAL Realcloud OU | 1 |
| 4 | AS43357OWL Owl Limited | 1 |
| 5 | AS57858AS57858 Angelnet Limited | 1 |
| 6 | AS62005BV-EU-AS BlueVPS OU | 1 |
| 7 | AS62240Clouvider Clouvider Limited | 1 |
| 8 | AS203020HostRoyale HostRoyale Technologies Pvt Ltd | 1 |
| 9 | AS207957ServHost-AS SERV.HOST GROUP LTD | 1 |
| 10 | AS208673ESTOXY-EE ESTOXY OU | 1 |
Compare Estonia with other countries
Ranked by flagged IPv4 networks.
Countries ranked next to Estonia by count
| # | Country | Networks | Per million |
|---|---|---|---|
| 84 | Afghanistan | 15 | - |
| 85 | Armenia | 15 | - |
| 86 | Estonia | 15 | - |
| 87 | Cambodia | 15 | - |
| 88 | Seychelles | 15 | - |
| 89 | Angola | 14 | - |
Other countries in the RIPE NCC region
| # | Country | Networks | Per million |
|---|---|---|---|
| 1 | Iraq | 66 | 144 |
| 2 | Uzbekistan | 42 | 125 |
| 7 | Albania | 26 | 51.4 |
| 11 | Jordan | 20 | 30.9 |
| 12 | Azerbaijan | 24 | 30.0 |
| 15 | Qatar | 21 | 24.5 |
| 17 | Moldova | 30 | 23.8 |
| 20 | Belgium | 242 | 19.6 |
Questions about Estonia
- How many malicious IP addresses are there in Estonia?
- On 2026-10-11, 15 IPv4 networks (/24 blocks) located in Estonia were flagged for malicious activity, with 17 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
- Which networks in Estonia host the most flagged IPs?
- ESTPAK Telia Eesti AS (AS3249, 5 networks), ELEVI-AS Elevi AS (AS202652, 2 networks), EstNOC-GLOBAL Realcloud OU (AS206804, 1 network). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in Estonia or anywhere else with one API call.