Spain (ES) Threat Intelligence

Spain has 17,591 malicious IP addresses with 592,344 abuse reports. Top threat categories include ssh bruteforce, web attack, generic bruteforce, tcp scan, repeat offender. Top attacking networks: Cafe Tecnologia LLC (2,056 IPs), Telefonica De Espana S.a.u. (1,788 IPs), Orange Espagne SA (964 IPs). Data collected since 2022-08-21, last activity 2026-04-16.

Threat Assessment: Spain shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, web attack, generic bruteforce. The majority of threats originate from networks operated by Cafe Tecnologia LLC and Telefonica De Espana S.a.u..