Country Threat Intelligence Summary: Spain
Loading country intelligence data...
Spain (ES) Threat Intelligence
ESSpain has 38,955 malicious IP addresses with 1,155,628 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, severe abuse. Top attacking networks: Telefonica De Espana S.a.u. (4,183 IPs), Digi Spain Telecom S.l. (3,017 IPs), Orange Espagne SA (2,431 IPs). Data collected since 2022-08-21, last activity 2026-10-04.
Threat Assessment: Spain shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Telefonica De Espana S.a.u. and Digi Spain Telecom S.l..
Total Reports
1,155,628
Unique IPs
38,955
First Seen
2022-08-21
Last Activity
2026-10-04
Top Threat Categories
Tcp Scan
144,394
Suspicious Activity
77,776
High Threat
26,007
Malware Distribution
20,141
Severe Abuse
6,078
Top Attacking Networks
Most Reported IPs in Spain
46.24.47.94
1,361 reports
46.253.45.10
1,262 reports
80.102.218.187
1,259 reports
85.152.57.60
1,166 reports
207.188.158.216
1,116 reports
Access this data via API
Get Spain threat intelligence programmatically.
curl https://ip.wayscloud.services/api/country/ES
Check any IP from Spain
Look up threat intelligence for a specific IP address.
Related:
Country Threat Ranking
Country Risk Trends →
Top Malicious IPs →
AS3352 Intelligence
AS57269 Intelligence
AS12479 Intelligence
Global Attack Trends
Detect Malicious Traffic
Loading threat intelligence data...