Poland (PL) Threat Intelligence

PL

Poland has 64,033 malicious IP addresses with 1,302,338 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: TELNET Ropczyce Sp. z o.o. (3,589 IPs), Orange Polska Spolka Akcyjna (3,391 IPs), 1337 Services GmbH (2,568 IPs). Data collected since 2023-05-26, last activity 2026-10-13.

Threat Assessment: Poland shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by TELNET Ropczyce Sp. z o.o. and Orange Polska Spolka Akcyjna.

Total Reports
1,302,338
Unique IPs
64,033
First Seen
2023-05-26
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 202,174
Suspicious Activity 91,802
High Threat 58,002
Malware Distribution 17,130
Intrusion Attempt 17,022

Top Attacking Networks

AS199585 TELNET Ropczyce Sp. z o.o.
3,589 IPs
AS5617 Orange Polska Spolka Akcyjna
3,391 IPs
AS210558 1337 Services GmbH
2,568 IPs

Most Reported IPs in Poland

54.38.52.18 1,587 reports
134.112.56.47 1,466 reports
95.214.53.157 1,417 reports
195.3.220.7 1,409 reports
89.68.245.7 1,263 reports

Access this data via API

Get Poland threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/PL

View full API documentation

See how we classify and verify threats →

Check any IP from Poland

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS199585 Intelligence AS5617 Intelligence AS210558 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...