Spain (ES) Threat Intelligence

ES

Spain has 39,708 malicious IP addresses with 1,175,195 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, severe abuse. Top attacking networks: Telefonica De Espana S.a.u. (4,302 IPs), Digi Spain Telecom S.l. (3,135 IPs), Orange Espagne SA (2,480 IPs). Data collected since 2022-08-21, last activity 2026-10-13.

Threat Assessment: Spain shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Telefonica De Espana S.a.u. and Digi Spain Telecom S.l..

Total Reports
1,175,195
Unique IPs
39,708
First Seen
2022-08-21
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 149,937
Suspicious Activity 82,985
High Threat 33,362
Malware Distribution 20,775
Severe Abuse 6,078

Top Attacking Networks

AS3352 Telefonica De Espana S.a.u.
4,302 IPs
AS57269 Digi Spain Telecom S.l.
3,135 IPs
AS12479 Orange Espagne SA
2,480 IPs

Most Reported IPs in Spain

46.24.47.94 1,601 reports
46.253.45.10 1,493 reports
80.102.218.187 1,380 reports
85.152.57.60 1,294 reports
207.188.158.216 1,257 reports

Access this data via API

Get Spain threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/ES

View full API documentation

See how we classify and verify threats →

Check any IP from Spain

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS3352 Intelligence AS57269 Intelligence AS12479 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...