Spain (ES) Threat Intelligence

ES

Spain has 18,829 malicious IP addresses with 617,976 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: Telefonica De Espana S.a.u. (2,109 IPs), Cafe Tecnologia LLC (2,056 IPs), Orange Espagne SA (1,015 IPs). Data collected since 2022-08-21, last activity 2026-04-05.

Threat Assessment: Spain shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Telefonica De Espana S.a.u. and Cafe Tecnologia LLC.

Total Reports
617,976
Unique IPs
18,829
First Seen
2022-08-21
Last Activity
2026-04-05

Top Threat Categories

Suspicious Activity 26,001
Severe Abuse 6,078
Moderate Threat 1,657
High Threat 1,125
Ssh Bruteforce 725

Top Attacking Networks

AS3352 Telefonica De Espana S.a.u.
2,109 IPs
AS205993 Cafe Tecnologia LLC
2,056 IPs
AS12479 Orange Espagne SA
1,015 IPs

Most Reported IPs in Spain

5.182.83.231 309 reports
46.253.45.10 264 reports
92.191.96.115 254 reports
34.175.118.185 250 reports
77.74.229.158 244 reports

Access this data via API

Get Spain threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/ES

View full API documentation

See how we classify and verify threats →

Check any IP from Spain

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS3352 Intelligence AS205993 Intelligence AS12479 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...