In my experience, if your site’s rankings are stable and there’s no manual penalty in search console, you might not need to disavow. I’ve seen cases where overzealous disavowing accidentally hurt legit links, so tread carefully! If those spam links are massive or look like deliberate negative SEO, it’s safer to disavow.
Start by exporting the list from GSC, filter out the obvious junk, and submit a disavow file via Google’s tool. Tools like https://ahrefs.com/backlink-checker or https://search.google.com/search-console/disavow-links can help streamline this. Personally, I’d only target domains with blatant spam patterns (e.g., 2,000+ links from one site) to avoid overkill. Keep monitoring rankings, and if things dip, reassess. Sometimes, patience pays off more than action here.