Sweden (SE) Threat Intelligence

SE

Sweden has 12,187 malicious IP addresses with 619,548 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: Hi3G Access AB (1,562 IPs), Telia Company AB (1,265 IPs), AMAZON-02 (1,064 IPs). Data collected since 2024-04-05, last activity 2026-04-05.

Threat Assessment: Sweden shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Hi3G Access AB and Telia Company AB.

Total Reports
619,548
Unique IPs
12,187
First Seen
2024-04-05
Last Activity
2026-04-05

Top Threat Categories

Suspicious Activity 27,745
Severe Abuse 12,145
Moderate Threat 2,803
High Threat 2,274
Ssh Bruteforce 693

Top Attacking Networks

AS44034 Hi3G Access AB
1,562 IPs
AS3301 Telia Company AB
1,265 IPs
AS16509 AMAZON-02
1,064 IPs

Most Reported IPs in Sweden

185.217.1.246 260 reports
155.4.244.107 260 reports
195.178.191.5 257 reports
158.174.210.161 257 reports
155.4.245.222 253 reports

Access this data via API

Get Sweden threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/SE

View full API documentation

See how we classify and verify threats →

Check any IP from Sweden

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS44034 Intelligence AS3301 Intelligence AS16509 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...