🇪🇪 Estonia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Estonia.

22Malicious IPs listed#93 of 182 countries · 0.03% of the world

2New in the last 24hfirst seen by any feed

5Reported by 2+ feedsindependent sources agree

0Ransomware victimsposted in the last 30 days

View Estonia on the live map →All listed IPs in Estonia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Harjumaa18
Võrumaa3
Tartu1

By city

Tallinn18
Võru3
Tartu1

Networks hosting the most

Network	IPs
AS3249 Telia Eesti AS	4
AS202652 Elevi AS	3
AS41745 Baykov Ilya Sergeevich	1
AS207957 SERV.HOST GROUP LTD	1
AS206804 EstNOC OU	1
AS57858 Angelnet Limited	1
AS208673 ESTOXY OU	1
AS199144 HexCore cloud s.r.o.	1
AS207408 servinga GmbH	1
AS43357 Owl Limited	1
AS49604 Zone Media OU	1
AS62005 BlueVPS OU	1
AS219359 Edge Core FZE	1
AS218914 Datagio Systems Ltd.	1
AS2586 Elisa Eesti AS	1

Malware families served from Estonia

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
93.123.39[.]96	Malware	Botx	Tallinn, Harjumaa	AS213702 QWINS LTD	1 feed · 6 sandbox samples	2026-10-12 02:18
194.76.227[.]152	Malware	Loki	Tallinn, Harjumaa	AS207408 servinga GmbH	1 feed · 2 sandbox samples	2026-10-11 14:09
138.124.183[.]115	Malware	Cerbu	Tallinn, Harjumaa	AS41745 Baykov Ilya Sergeevich	1 feed · 2 sandbox samples	2026-10-11 09:18
158.173.75[.]105	Attacker	Malicious IP	Tallinn, Harjumaa	AS206804 EstNOC OU	1 feed	2026-10-11 04:31
213.232.112[.]73	Attacker	Attacking host	Tallinn, Harjumaa	AS43357 Owl Limited	2 feeds	2026-10-11 04:31
85.253.195[.]95	Attacker	Malicious IP	Tallinn, Harjumaa	AS2586 Elisa Eesti AS	1 feed	2026-10-11 04:31
178.214.110[.]4	Attacker	Attacking host	Tallinn, Harjumaa	AS208673 ESTOXY OU	1 feed	2026-10-10 18:46
185.157.111[.]178	Attacker	Attacking host	Võru, Võrumaa	AS202652 Elevi AS	2 feeds	2026-10-10 04:30
185.157.109[.]79	Attacker	Attacking host	Võru, Võrumaa	AS202652 Elevi AS	2 feeds	2026-10-09 04:27
165.231.143[.]109	Attacker	Attacking host	Tallinn, Harjumaa	AS57858 Angelnet Limited	2 feeds	2026-10-09 04:27
185.157.109[.]60	Attacker	Attacking host	Võru, Võrumaa	AS202652 Elevi AS	1 feed	2026-10-09 04:27
83.166.50[.]15	Attacker	On multiple blocklists	Tallinn, Harjumaa	AS3249 Telia Eesti AS	2 feeds	2026-10-09 04:27
85.29.246[.]199	Attacker	On multiple blocklists	Tallinn, Harjumaa	AS3249 Telia Eesti AS	1 feed	2026-10-09 04:27
217.146.69[.]5	Malware	Contacted by malware	Tartu, Tartu	AS49604 Zone Media OU	1 feed · 2 sandbox samples	2026-10-07 05:48
188.119.112[.]104	Malware	Contacted by malware	Tallinn, Harjumaa	AS199144 HexCore cloud s.r.o.	1 feed · 20 sandbox samples	2026-10-07 04:48
45.86.60[.]114:5656	C2	AdaptixC2	Tallinn, Harjumaa	AS219359 Edge Core FZE	1 feed	2026-10-04 19:45
45.83.182[.]68:7443	C2	Botnet C2	Tallinn, Harjumaa	AS62005 BlueVPS OU	1 feed	2026-10-04 06:05
150.241.74[.]83	Attacker	On multiple blocklists	Tallinn, Harjumaa	AS207957 SERV.HOST GROUP LTD	aggregated list	—
37.157.111[.]122	Attacker	Attacking host	Tallinn, Harjumaa	AS3249 Telia Eesti AS	1 feed	—
37.157.91[.]62	Attacker	On multiple blocklists	Tallinn, Harjumaa	AS3249 Telia Eesti AS	1 feed	—
79.98.37[.]112	Attacker	Attacking host	Tallinn, Harjumaa	AS218914 Datagio Systems Ltd.	1 feed	—
95.85.245[.]227	Attacker	Compromised host	Tallinn, Harjumaa	AS209693 OC NETWORKS LIMITED	1 feed	—

See every listed IP in Estonia →

Ransomware victims in Estonia

No ransomware victims from Estonia posted in the last 90 days.