Australia (AU) Threat Intelligence

AU

Australia has 29,662 malicious IP addresses with 1,171,482 abuse reports. Top threat categories include ssh bruteforce, web attack, generic bruteforce, web scanner, rdp bruteforce. Top attacking networks: DigitalOcean, LLC (9,684 IPs), Telstra Limited (2,560 IPs), DIGITALOCEAN-ASN (2,458 IPs). Data collected since 2022-11-29, last activity 2026-04-16.

Threat Assessment: Australia shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, web attack, generic bruteforce. The majority of threats originate from networks operated by DigitalOcean, LLC and Telstra Limited.

Total Reports
1,171,482
Unique IPs
29,662
First Seen
2022-11-29
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 1,581
Web Attack 250
Generic Bruteforce 98
Web Scanner 7
Rdp Bruteforce 7

Top Attacking Networks

AS14061 DigitalOcean, LLC
9,684 IPs
AS1221 Telstra Limited
2,560 IPs
AS14061 DIGITALOCEAN-ASN
2,458 IPs

Most Reported IPs in Australia

158.178.141.16 260 reports
20.40.73.192 253 reports
40.82.214.8 242 reports
40.127.67.83 235 reports
152.67.110.201 234 reports

Access this data via API

Get Australia threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/AU

View full API documentation

See how we classify and verify threats →

Check any IP from Australia

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS14061 Intelligence AS1221 Intelligence AS14061 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...