Sweden (SE) Threat Intelligence

SE

Sweden has 9,791 malicious IP addresses with 587,610 abuse reports. Top threat categories include ssh bruteforce, web attack, generic bruteforce, repeat offender, email abuse. Top attacking networks: Telia Company AB (897 IPs), Tele2 SWIPnet (826 IPs), Hi3G Access AB (714 IPs). Data collected since 2024-04-05, last activity 2026-04-16.

Threat Assessment: Sweden exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are ssh bruteforce, web attack, generic bruteforce. The majority of threats originate from networks operated by Telia Company AB and Tele2 SWIPnet.

Total Reports
587,610
Unique IPs
9,791
First Seen
2024-04-05
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 741
Web Attack 146
Generic Bruteforce 51
Repeat Offender 20
Email Abuse 20

Top Attacking Networks

AS3301 Telia Company AB
897 IPs
AS1257 Tele2 SWIPnet
826 IPs
AS44034 Hi3G Access AB
714 IPs

Most Reported IPs in Sweden

195.178.191.5 268 reports
158.174.210.161 265 reports
155.4.244.169 257 reports
158.174.211.17 250 reports
155.4.244.179 249 reports

Access this data via API

Get Sweden threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/SE

View full API documentation

See how we classify and verify threats →

Check any IP from Sweden

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS3301 Intelligence AS1257 Intelligence AS44034 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...