Germany (DE) Threat Intelligence

DE

Germany has 214,293 malicious IP addresses with 7,603,932 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, severe abuse. Top attacking networks: DigitalOcean, LLC (33,181 IPs), Deutsche Telekom AG (20,372 IPs), Hetzner Online GmbH (12,479 IPs). Data collected since 2022-10-13, last activity 2026-10-12.

Threat Assessment: Germany is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by DigitalOcean, LLC and Deutsche Telekom AG.

Total Reports
7,603,932
Unique IPs
214,293
First Seen
2022-10-13
Last Activity
2026-10-12

Top Threat Categories

Tcp Scan 1,305,929
Suspicious Activity 666,093
High Threat 575,333
Malware Distribution 184,689
Severe Abuse 51,325

Top Attacking Networks

AS14061 DigitalOcean, LLC
33,181 IPs
AS3320 Deutsche Telekom AG
20,372 IPs
AS24940 Hetzner Online GmbH
12,479 IPs

Most Reported IPs in Germany

178.20.210.151 2,336 reports
213.209.159.25 2,295 reports
213.209.159.26 2,166 reports
178.105.200.202 1,852 reports
45.135.193.193 1,798 reports

Access this data via API

Get Germany threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/DE

View full API documentation

See how we classify and verify threats →

Check any IP from Germany

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS14061 Intelligence AS3320 Intelligence AS24940 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...