Country Threat Intelligence Summary: Sweden
Loading country intelligence data...
Sweden (SE) Threat Intelligence
SESweden has 21,857 malicious IP addresses with 1,106,318 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, severe abuse. Top attacking networks: Amazon.com, Inc. (2,085 IPs), Telia Company AB (2,032 IPs), Tele2 SWIPnet (1,809 IPs). Data collected since 2024-04-05, last activity 2026-09-20.
Threat Assessment: Sweden shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Amazon.com, Inc. and Telia Company AB.
Total Reports
1,106,318
Unique IPs
21,857
First Seen
2024-04-05
Last Activity
2026-09-20
Top Threat Categories
Tcp Scan
134,572
Suspicious Activity
74,235
High Threat
22,987
Malware Distribution
21,468
Severe Abuse
12,145
Top Attacking Networks
Most Reported IPs in Sweden
195.178.191.5
1,036 reports
171.25.158.47
1,017 reports
171.25.158.74
1,017 reports
171.25.158.24
1,014 reports
171.25.158.68
1,011 reports
Access this data via API
Get Sweden threat intelligence programmatically.
curl https://ip.wayscloud.services/api/country/SE
Check any IP from Sweden
Look up threat intelligence for a specific IP address.
Related:
Country Threat Ranking
Country Risk Trends →
Top Malicious IPs →
AS16509 Intelligence
AS3301 Intelligence
AS1257 Intelligence
Global Attack Trends
Detect Malicious Traffic
Loading threat intelligence data...