Malicious IPs in Poland
IPv4 networks located in Poland that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
Poland at a glance
Poland had 145 flagged IPv4 networks in the snapshot of 2026-10-08, rank #26 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 7.23 flagged networks per million addresses, rank #48 of 78, close to the median of 9.71 across all rated countries. The largest category is brute force sources with 72% of the flagged networks, followed by other malicious networks (12%). The three networks (ASNs) with the most flagged IPs hold 12% of them, led by OVH OVH SAS (AS16276).
Malicious activity in Poland by category
A network listed in several categories counts once, in the most specific one.
Brute force sources in Poland
105 (72%)105 flagged networks, #24 of 160 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
Other malicious networks in Poland
17 (12%)17 flagged networks, #31 of 146 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country
C2 servers in Poland
7 (5%)7 flagged networks, #13 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country
Botnet hosts in Poland
6 (4%)6 flagged networks, #45 of 130 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
Scanners in Poland
6 (4%)6 flagged networks, #18 of 42 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country
Spam sources in Poland
4 (3%)4 flagged networks, #32 of 88 countries for spam sources. Sources of email spam. Spam Sources by Country
Networks with the most flagged IPs in Poland
Autonomous systems announcing the flagged networks located in Poland.
| # | Network | Flagged networks |
|---|---|---|
| 1 | AS16276OVH OVH SAS | 7 |
| 2 | AS210558services-1337-gmbh 1337 Services GmbH | 5 |
| 3 | AS201814Mevspace MEVSPACE sp. z o.o. | 5 |
| 4 | AS198133AIR-NET-AS AIRNET MARIUSZ KAJDAS, TOMASZ PYREK sp.j. | 5 |
| 5 | AS5617TPNET Orange Polska Spolka Akcyjna | 5 |
| 6 | AS9141AS9141 P4 Sp. z o.o. | 4 |
| 7 | AS198766Netsystem-Brzesko Netsystem Sp. z o.o. | 4 |
| 8 | AS8374PLUSNET Polkomtel Sp. z o.o. | 4 |
| 9 | AS198072PL-FREENET GTnet Sp. z o.o. | 3 |
| 10 | AS60831ARKADIA Arkadia Spolka Cywilna Krysztof Rozmus Barbara Rozmus | 3 |
Compare Poland with other countries
Ranked by flagged networks per million allocated IPv4 addresses.
Countries ranked next to Poland by rate
| # | Country | Networks | Per million |
|---|---|---|---|
| 46 | Türkiye | 123 | 7.31 |
| 47 | Romania | 57 | 7.26 |
| 48 | Poland | 145 | 7.23 |
| 49 | Hungary | 37 | 6.25 |
| 50 | China | 2,136 | 6.23 |
| 51 | Ireland | 57 | 5.52 |
Other countries in the RIPE NCC region
| # | Country | Networks | Per million |
|---|---|---|---|
| 1 | Iraq | 59 | 129 |
| 2 | Uzbekistan | 40 | 119 |
| 7 | Albania | 25 | 49.4 |
| 9 | Jordan | 25 | 38.6 |
| 12 | Azerbaijan | 24 | 30.0 |
| 13 | Armenia | 20 | 29.5 |
| 14 | Oman | 28 | 29.4 |
| 15 | Qatar | 24 | 28.0 |
Questions about Poland
- How many malicious IP addresses are there in Poland?
- On 2026-10-08, 145 IPv4 networks (/24 blocks) located in Poland were flagged for malicious activity, with 2,539 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
- Which networks in Poland host the most flagged IPs?
- OVH OVH SAS (AS16276, 7 networks), services-1337-gmbh 1337 Services GmbH (AS210558, 5 networks), Mevspace MEVSPACE sp. z o.o. (AS201814, 5 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in Poland or anywhere else with one API call.