Malicious IPs in Latvia
IPv4 networks located in Latvia that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
Latvia at a glance
Latvia had 19 flagged IPv4 networks in the snapshot of 2026-10-11, rank #77 of 179 countries by absolute count. Latvia has too little allocated IPv4 space for a meaningful per-million rate, so it is ranked by absolute count only. The largest category is other malicious networks with 37% of the flagged networks, followed by brute force sources (26%). The three networks (ASNs) with the most flagged IPs hold 37% of them, led by AS56971 CGI GLOBAL LIMITED (AS56971).
Malicious activity in Latvia by category
A network listed in several categories counts once, in the most specific one.
Other malicious networks in Latvia
7 (37%)7 flagged networks, #62 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country
Brute force sources in Latvia
5 (26%)5 flagged networks, #94 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
Botnet hosts in Latvia
4 (21%)4 flagged networks, #60 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
C2 servers in Latvia
2 (11%)2 flagged networks, #29 of 51 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country
Spam sources in Latvia
1 (5%)1 flagged network, #54 of 89 countries for spam sources. Sources of email spam. Spam Sources by Country
Networks with the most flagged IPs in Latvia
Autonomous systems announcing the flagged networks located in Latvia.
| # | Network | Flagged networks |
|---|---|---|
| 1 | AS56971AS56971 CGI GLOBAL LIMITED | 5 |
| 2 | AS204391nbestihosting NBI SIA | 1 |
| 3 | AS214576BRM5-AS Berdiev Ruslan Mukhabatovich | 1 |
| 4 | AS41564AS41564 Orion Network Limited | 1 |
| 5 | AS1257TELE2 | 1 |
| 6 | AS12993DEAC-AS Sabiedriba ar ierobezotu atbildibu DELSKA Latvia | 1 |
| 7 | AS20910BALTKOM-AS SIA "BITE Latvija" | 1 |
| 8 | AS26383ASNET - Baxet Group Inc. | 1 |
| 9 | AS29600LATVENERGO-AS AS "Latvenergo" | 1 |
| 10 | AS41745FORTIS-AS Baykov Ilya Sergeevich | 1 |
Compare Latvia with other countries
Ranked by flagged IPv4 networks.
Countries ranked next to Latvia by count
| # | Country | Networks | Per million |
|---|---|---|---|
| 75 | Qatar | 21 | 24.5 |
| 76 | Jordan | 20 | 30.9 |
| 77 | Latvia | 19 | - |
| 78 | Oman | 19 | - |
| 79 | Benin | 18 | - |
| 80 | Bolivia | 18 | - |
Other countries in the RIPE NCC region
| # | Country | Networks | Per million |
|---|---|---|---|
| 1 | Iraq | 66 | 144 |
| 2 | Uzbekistan | 42 | 125 |
| 7 | Albania | 26 | 51.4 |
| 11 | Jordan | 20 | 30.9 |
| 12 | Azerbaijan | 24 | 30.0 |
| 15 | Qatar | 21 | 24.5 |
| 17 | Moldova | 30 | 23.8 |
| 20 | Belgium | 242 | 19.6 |
Questions about Latvia
- How many malicious IP addresses are there in Latvia?
- On 2026-10-11, 19 IPv4 networks (/24 blocks) located in Latvia were flagged for malicious activity, with 531 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
- Which networks in Latvia host the most flagged IPs?
- AS56971 CGI GLOBAL LIMITED (AS56971, 5 networks), nbestihosting NBI SIA (AS204391, 1 network), BRM5-AS Berdiev Ruslan Mukhabatovich (AS214576, 1 network). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in Latvia or anywhere else with one API call.