Sweden (SE) Threat Intelligence

SE

Sweden has 21,231 malicious IP addresses with 1,044,751 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: Amazon.com, Inc. (2,037 IPs), Telia Company AB (1,872 IPs), Hi3G Access AB (1,687 IPs). Data collected since 2024-04-05, last activity 2026-09-06.

Threat Assessment: Sweden shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Amazon.com, Inc. and Telia Company AB.

Total Reports
1,044,751
Unique IPs
21,231
First Seen
2024-04-05
Last Activity
2026-09-06

Top Threat Categories

Suspicious Activity 27,745
Severe Abuse 12,145
Moderate Threat 2,803
High Threat 2,274
Ssh Bruteforce 1,843

Top Attacking Networks

AS16509 Amazon.com, Inc.
2,037 IPs
AS3301 Telia Company AB
1,872 IPs
AS44034 Hi3G Access AB
1,687 IPs

Most Reported IPs in Sweden

195.178.191.5 826 reports
155.4.245.222 817 reports
171.25.158.70 817 reports
155.4.244.179 817 reports
158.174.210.161 813 reports

Access this data via API

Get Sweden threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/SE

View full API documentation

See how we classify and verify threats →

Check any IP from Sweden

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS16509 Intelligence AS3301 Intelligence AS44034 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...