Germany (DE) Threat Intelligence

DE

Germany has 166,233 malicious IP addresses with 4,735,163 abuse reports. Top threat categories include suspicious activity, severe abuse, professional threat, moderate threat, high threat. Top attacking networks: DigitalOcean, LLC (25,210 IPs), Deutsche Telekom AG (14,350 IPs), Hetzner Online GmbH (9,312 IPs). Data collected since 2022-10-13, last activity 2026-07-06.

Threat Assessment: Germany is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are suspicious activity, severe abuse, professional threat. The majority of threats originate from networks operated by DigitalOcean, LLC and Deutsche Telekom AG.

Total Reports
4,735,163
Unique IPs
166,233
First Seen
2022-10-13
Last Activity
2026-07-06

Top Threat Categories

Suspicious Activity 126,767
Severe Abuse 51,325
Professional Threat 20,407
Moderate Threat 7,932
High Threat 6,332

Top Attacking Networks

AS14061 DigitalOcean, LLC
25,210 IPs
AS3320 Deutsche Telekom AG
14,350 IPs
AS24940 Hetzner Online GmbH
9,312 IPs

Most Reported IPs in Germany

139.19.117.129 491 reports
94.26.106.201 420 reports
78.111.67.246 417 reports
207.154.230.149 416 reports
95.90.13.168 414 reports

Access this data via API

Get Germany threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/DE

View full API documentation

See how we classify and verify threats →

Check any IP from Germany

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS14061 Intelligence AS3320 Intelligence AS24940 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...