Finland (FI) Threat Intelligence

FI

Finland has 13,331 malicious IP addresses with 453,473 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: Hetzner Online GmbH (4,625 IPs), Google LLC (1,318 IPs), Oy Crea Nova Hosting Solution Ltd (721 IPs). Data collected since 2023-08-03, last activity 2026-07-27.

Threat Assessment: Finland shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Hetzner Online GmbH and Google LLC.

Total Reports
453,473
Unique IPs
13,331
First Seen
2023-08-03
Last Activity
2026-07-27

Top Threat Categories

Suspicious Activity 7,799
Severe Abuse 4,946
Moderate Threat 859
High Threat 566
Ssh Bruteforce 502

Top Attacking Networks

AS24940 Hetzner Online GmbH
4,625 IPs
AS396982 Google LLC
1,318 IPs
AS51765 Oy Crea Nova Hosting Solution Ltd
721 IPs

Most Reported IPs in Finland

94.159.112.56 514 reports
80.223.201.173 513 reports
80.223.163.253 512 reports
80.223.198.246 510 reports
80.223.192.112 510 reports

Access this data via API

Get Finland threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/FI

View full API documentation

See how we classify and verify threats →

Check any IP from Finland

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS24940 Intelligence AS396982 Intelligence AS51765 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...