Estonia (EE) Threat Intelligence

EE

Estonia has 4,043 malicious IP addresses with 77,050 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, spam. Top attacking networks: Orion Network Limited (1,152 IPs), WS Telecom Inc (380 IPs), Telia Eesti AS (248 IPs). Data collected since 2024-04-28, last activity 2026-10-13.

Threat Assessment: Estonia exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Orion Network Limited and WS Telecom Inc.

Total Reports
77,050
Unique IPs
4,043
First Seen
2024-04-28
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 10,657
Suspicious Activity 7,421
High Threat 3,879
Malware Distribution 1,506
Spam 945

Top Attacking Networks

AS58065 Orion Network Limited
1,152 IPs
AS209372 WS Telecom Inc
380 IPs
AS3249 Telia Eesti AS
248 IPs

Most Reported IPs in Estonia

83.166.50.15 1,301 reports
85.29.246.199 1,237 reports
37.157.91.62 1,183 reports
109.206.241.199 733 reports
95.85.245.227 654 reports

Access this data via API

Get Estonia threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/EE

View full API documentation

See how we classify and verify threats →

Check any IP from Estonia

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS58065 Intelligence AS209372 Intelligence AS3249 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...