Spain (ES) Threat Intelligence

ES

Spain has 31,202 malicious IP addresses with 903,354 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, ssh bruteforce, high threat. Top attacking networks: Cafe Tecnologia LLC (4,104 IPs), Telefonica De Espana S.a.u. (3,257 IPs), Digi Spain Telecom S.l. (1,889 IPs). Data collected since 2022-08-21, last activity 2026-07-13.

Threat Assessment: Spain shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Cafe Tecnologia LLC and Telefonica De Espana S.a.u..

Total Reports
903,354
Unique IPs
31,202
First Seen
2022-08-21
Last Activity
2026-07-13

Top Threat Categories

Suspicious Activity 26,001
Severe Abuse 6,078
Moderate Threat 1,657
Ssh Bruteforce 1,244
High Threat 1,125

Top Attacking Networks

AS205993 Cafe Tecnologia LLC
4,104 IPs
AS3352 Telefonica De Espana S.a.u.
3,257 IPs
AS57269 Digi Spain Telecom S.l.
1,889 IPs

Most Reported IPs in Spain

5.182.83.231 477 reports
217.160.226.51 459 reports
34.175.118.185 454 reports
217.154.106.153 452 reports
46.24.47.94 449 reports

Access this data via API

Get Spain threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/ES

View full API documentation

See how we classify and verify threats →

Check any IP from Spain

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS205993 Intelligence AS3352 Intelligence AS57269 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...