Sweden (SE) Threat Intelligence

SE

Sweden has 19,079 malicious IP addresses with 914,173 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: Amazon.com, Inc. (1,964 IPs), Telia Company AB (1,764 IPs), Hi3G Access AB (1,668 IPs). Data collected since 2024-04-05, last activity 2026-07-27.

Threat Assessment: Sweden shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Amazon.com, Inc. and Telia Company AB.

Total Reports
914,173
Unique IPs
19,079
First Seen
2024-04-05
Last Activity
2026-07-27

Top Threat Categories

Suspicious Activity 27,745
Severe Abuse 12,145
Moderate Threat 2,803
High Threat 2,274
Ssh Bruteforce 1,267

Top Attacking Networks

AS16509 Amazon.com, Inc.
1,964 IPs
AS3301 Telia Company AB
1,764 IPs
AS44034 Hi3G Access AB
1,668 IPs

Most Reported IPs in Sweden

195.178.191.5 556 reports
155.4.244.179 547 reports
171.25.158.70 545 reports
155.4.245.222 543 reports
171.25.158.57 542 reports

Access this data via API

Get Sweden threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/SE

View full API documentation

See how we classify and verify threats →

Check any IP from Sweden

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS16509 Intelligence AS3301 Intelligence AS44034 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...