Sweden (SE) Threat Intelligence

SE

Sweden has 19,837 malicious IP addresses with 965,247 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: Amazon.com, Inc. (2,006 IPs), Telia Company AB (1,821 IPs), Hi3G Access AB (1,683 IPs). Data collected since 2024-04-05, last activity 2026-08-15.

Threat Assessment: Sweden shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Amazon.com, Inc. and Telia Company AB.

Total Reports
965,247
Unique IPs
19,837
First Seen
2024-04-05
Last Activity
2026-08-15

Top Threat Categories

Suspicious Activity 27,745
Severe Abuse 12,145
Moderate Threat 2,803
High Threat 2,274
Ssh Bruteforce 1,519

Top Attacking Networks

AS16509 Amazon.com, Inc.
2,006 IPs
AS3301 Telia Company AB
1,821 IPs
AS44034 Hi3G Access AB
1,683 IPs

Most Reported IPs in Sweden

195.178.191.5 677 reports
171.25.158.70 670 reports
155.4.244.179 663 reports
155.4.245.222 660 reports
158.174.210.161 659 reports

Access this data via API

Get Sweden threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/SE

View full API documentation

See how we classify and verify threats →

Check any IP from Sweden

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS16509 Intelligence AS3301 Intelligence AS44034 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...