Sweden (SE) Threat Intelligence

SE

Sweden has 21,854 malicious IP addresses with 1,106,190 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, severe abuse. Top attacking networks: Amazon.com, Inc. (2,085 IPs), Telia Company AB (2,032 IPs), Tele2 SWIPnet (1,809 IPs). Data collected since 2024-04-05, last activity 2026-09-20.

Threat Assessment: Sweden shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Amazon.com, Inc. and Telia Company AB.

Total Reports
1,106,190
Unique IPs
21,854
First Seen
2024-04-05
Last Activity
2026-09-20

Top Threat Categories

Tcp Scan 134,572
Suspicious Activity 74,235
High Threat 22,864
Malware Distribution 21,468
Severe Abuse 12,145

Top Attacking Networks

AS16509 Amazon.com, Inc.
2,085 IPs
AS3301 Telia Company AB
2,032 IPs
AS1257 Tele2 SWIPnet
1,809 IPs

Most Reported IPs in Sweden

195.178.191.5 1,036 reports
171.25.158.47 1,016 reports
171.25.158.74 1,016 reports
171.25.158.24 1,013 reports
171.25.158.68 1,010 reports

Access this data via API

Get Sweden threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/SE

View full API documentation

See how we classify and verify threats →

Check any IP from Sweden

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS16509 Intelligence AS3301 Intelligence AS1257 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...