Italy (IT) Threat Intelligence

IT

Italy has 31,371 malicious IP addresses with 1,557,052 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: Wind Tre S.p.A. (12,544 IPs), TIM (3,580 IPs), Fastweb (801 IPs). Data collected since 2022-09-13, last activity 2026-04-05.

Threat Assessment: Italy shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Wind Tre S.p.A. and TIM.

Total Reports
1,557,052
Unique IPs
31,371
First Seen
2022-09-13
Last Activity
2026-04-05

Top Threat Categories

Suspicious Activity 77,067
Severe Abuse 7,624
Moderate Threat 7,259
High Threat 3,210
Ssh Bruteforce 824

Top Attacking Networks

AS1267 Wind Tre S.p.A.
12,544 IPs
AS3269 TIM
3,580 IPs
AS12874 Fastweb
801 IPs

Most Reported IPs in Italy

151.16.58.234 270 reports
85.18.236.229 266 reports
62.97.44.51 247 reports
156.54.170.192 238 reports
156.54.108.185 237 reports

Access this data via API

Get Italy threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/IT

View full API documentation

See how we classify and verify threats →

Check any IP from Italy

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS1267 Intelligence AS3269 Intelligence AS12874 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...