Italy (IT) Threat Intelligence

IT

Italy has 25,316 malicious IP addresses with 1,474,696 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, web attack, email abuse, repeat offender. Top attacking networks: Wind Tre S.p.A. (8,781 IPs), TIM (2,752 IPs), Fastweb (798 IPs). Data collected since 2022-09-13, last activity 2026-04-16.

Threat Assessment: Italy shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, generic bruteforce, web attack. The majority of threats originate from networks operated by Wind Tre S.p.A. and TIM.

Total Reports
1,474,696
Unique IPs
25,316
First Seen
2022-09-13
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 702
Generic Bruteforce 93
Web Attack 92
Email Abuse 10
Repeat Offender 7

Top Attacking Networks

AS1267 Wind Tre S.p.A.
8,781 IPs
AS3269 TIM
2,752 IPs
AS12874 Fastweb
798 IPs

Most Reported IPs in Italy

85.18.236.229 264 reports
93.71.118.99 261 reports
88.147.30.59 251 reports
95.240.192.149 241 reports
79.3.96.178 239 reports

Access this data via API

Get Italy threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/IT

View full API documentation

See how we classify and verify threats →

Check any IP from Italy

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS1267 Intelligence AS3269 Intelligence AS12874 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...