Country Threat Intelligence Summary: Sweden
Loading country intelligence data...
Sweden (SE) Threat Intelligence
SESweden has 22,561 malicious IP addresses with 1,201,886 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, severe abuse. Top attacking networks: Amazon.com, Inc. (2,116 IPs), Telia Company AB (2,112 IPs), Tele2 SWIPnet (1,866 IPs). Data collected since 2024-04-05, last activity 2026-10-13.
Threat Assessment: Sweden shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Amazon.com, Inc. and Telia Company AB.
Total Reports
1,201,886
Unique IPs
22,561
First Seen
2024-04-05
Last Activity
2026-10-13
Top Threat Categories
Tcp Scan
149,115
Suspicious Activity
90,027
High Threat
80,021
Malware Distribution
27,132
Severe Abuse
12,145
Top Attacking Networks
Most Reported IPs in Sweden
185.246.130.20
1,633 reports
195.178.191.5
1,616 reports
171.25.158.47
1,522 reports
171.25.158.74
1,442 reports
185.246.128.133
1,399 reports
Access this data via API
Get Sweden threat intelligence programmatically.
curl https://ip.wayscloud.services/api/country/SE
Check any IP from Sweden
Look up threat intelligence for a specific IP address.
Related:
Country Threat Ranking
Country Risk Trends →
Top Malicious IPs →
AS16509 Intelligence
AS3301 Intelligence
AS1257 Intelligence
Global Attack Trends
Detect Malicious Traffic
Loading threat intelligence data...