Malicious IPs in Finland

IPv4 networks located in Finland that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
77
#39 of 176 countries
Per million allocated IPv4
5.50
#56 of 77 countries
Flagged IPv4 addresses
847
ranges count at most as a /24
Allocated IPv4 addresses
13,988,928
RIR delegation statistics

Finland at a glance

Finland had 77 flagged IPv4 networks in the snapshot of 2026-10-10, rank #39 of 176 countries by absolute count. Relative to its allocated IPv4 space that is 5.50 flagged networks per million addresses, rank #56 of 77, well below the median of 10.6 across all rated countries. The largest category is brute force sources with 44% of the flagged networks, followed by botnet hosts (19%). The three networks (ASNs) with the most flagged IPs hold 45% of them, led by HETZNER-AS Hetzner Online GmbH (AS24940). Another 1 flagged IPv6 network is located in Finland.

Malicious activity in Finland by category

A network listed in several categories counts once, in the most specific one. Also flagged: 1 IPv6 network.

  • Brute force sources in Finland

    34 (44%)

    34 flagged networks, #40 of 159 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Botnet hosts in Finland

    15 (19%)

    15 flagged networks, #24 of 126 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Other malicious networks in Finland

    12 (16%)

    12 flagged networks, #41 of 147 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Scanners in Finland

    9 (12%)

    9 flagged networks, #17 of 44 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country

  • C2 servers in Finland

    7 (9%)

    7 flagged networks, #13 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country

Networks with the most flagged IPs in Finland

Autonomous systems announcing the flagged networks located in Finland.

#NetworkFlagged networks
1AS24940HETZNER-AS Hetzner Online GmbH20
2AS15169GOOGLE - Google LLC9
3AS1759TSF-IP-Core Telia Finland Oyj6
4AS57359PYHANET-AS Pyhanet Oy3
5AS204339FIRSTSERVER-FL-AS FIRST SERVER LIMITED3
6AS207569I-SERVERS-NORTH-EU IHOR HOSTING LTD2
7AS51765CREANOVA-AS Oy Crea Nova Hosting Solution Ltd2
8AS13335CLOUDFLARENET - Cloudflare, Inc.2
9AS198020DATACRUNCH Verda Cloud Oy2
10AS210644AEZA-AS AEZA GROUP LLC2

Compare Finland with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Finland by rate

#CountryNetworksPer million
54Venezuela395.82
55Colombia1005.71
56Finland775.50
57Taiwan1875.09
58Sweden1564.94
59South Africa1314.82

Other countries in the RIPE NCC region

#CountryNetworksPer million
1Iraq65142
2Uzbekistan41122
7Albania3059.3
10Jordan2233.9
13Azerbaijan2328.8
15Qatar2326.9
16Oman2425.2
17Moldova3023.8

Questions about Finland

How many malicious IP addresses are there in Finland?
On 2026-10-10, 77 IPv4 networks (/24 blocks) located in Finland were flagged for malicious activity, with 847 listed IPv4 addresses and 1 IPv6 network. Each /24 counts once, however many of its addresses are listed.
Which networks in Finland host the most flagged IPs?
HETZNER-AS Hetzner Online GmbH (AS24940, 20 networks), GOOGLE - Google LLC (AS15169, 9 networks), TSF-IP-Core Telia Finland Oyj (AS1759, 6 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Finland or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Finland