Saudi Arabia (SA) Threat Intelligence

SA

Saudi Arabia has 13,200 malicious IP addresses with 173,126 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: Saudi Telecom Company JSC (5,342 IPs), Saudi Telecom Company JSC (2,358 IPs), Etihad Etisalat, a joint stock company (2,023 IPs). Data collected since 2024-03-13, last activity 2026-10-13.

Threat Assessment: Saudi Arabia shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Saudi Telecom Company JSC and Saudi Telecom Company JSC.

Total Reports
173,126
Unique IPs
13,200
First Seen
2024-03-13
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 19,630
Suspicious Activity 13,226
High Threat 8,003
Malware Distribution 3,832
Intrusion Attempt 3,355

Top Attacking Networks

AS25019 Saudi Telecom Company JSC
5,342 IPs
AS39891 Saudi Telecom Company JSC
2,358 IPs
AS35819 Etihad Etisalat, a joint stock company
2,023 IPs

Most Reported IPs in Saudi Arabia

79.72.3.119 1,415 reports
144.24.209.174 1,239 reports
79.170.53.30 1,165 reports
94.97.85.162 570 reports
8.213.81.38 513 reports

Access this data via API

Get Saudi Arabia threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/SA

View full API documentation

See how we classify and verify threats →

Check any IP from Saudi Arabia

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS25019 Intelligence AS39891 Intelligence AS35819 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...