Finland (FI) Threat Intelligence

FI

Finland has 7,265 malicious IP addresses with 235,986 abuse reports. Top threat categories include ssh bruteforce, web attack, generic bruteforce, web scanner, mail bruteforce. Top attacking networks: Hetzner Online GmbH (2,868 IPs), I-servers Ltd (307 IPs), H2nexus Ltd (294 IPs). Data collected since 2023-08-03, last activity 2026-04-16.

Threat Assessment: Finland exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are ssh bruteforce, web attack, generic bruteforce. The majority of threats originate from networks operated by Hetzner Online GmbH and I-servers Ltd.

Total Reports
235,986
Unique IPs
7,265
First Seen
2023-08-03
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 238
Web Attack 63
Generic Bruteforce 11
Web Scanner 3
Mail Bruteforce 3

Top Attacking Networks

AS24940 Hetzner Online GmbH
2,868 IPs
AS207569 I-servers Ltd
307 IPs
AS215730 H2nexus Ltd
294 IPs

Most Reported IPs in Finland

45.82.109.136 224 reports
65.108.2.171 223 reports
37.228.129.168 220 reports
45.144.53.207 219 reports
185.67.82.114 218 reports

Access this data via API

Get Finland threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/FI

View full API documentation

See how we classify and verify threats →

Check any IP from Finland

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS24940 Intelligence AS207569 Intelligence AS215730 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...