🇮🇹 Italy: live cyber threat activity

Malicious IPs, malware and ransomware victims in Italy.

405Malicious IPs listed#23 of 182 countries · 0.61% of the world
103New in the last 24hfirst seen by any feed
154Reported by 2+ feedsindependent sources agree
26Ransomware victimsposted in the last 30 days

View Italy on the live map →All listed IPs in ItalyRansomware victims in Italy

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C211
  2. Malware41
  3. Phishing0
  4. Attacker353

By state or region

  1. Basilicate130
  2. Lombardy77
  3. Apulia37
  4. Sardinia32
  5. Lazio27
  6. Tuscany20
  7. Piedmont18
  8. Campania18
  9. Sicily14
  10. Veneto11
  11. Emilia-Romagna7
  12. Abruzzo6
  13. Umbria3
  14. The Marches2
  15. Calabria2

By city

  1. Milan49
  2. Picerno36
  3. Tito22
  4. Ruoti21
  5. Mogorella17
  6. Rome16
  7. Potenza16
  8. Palmas Arborea13
  9. Baragiano11
  10. Cappelluccia11
  11. Martina Franca6
  12. Genzano di Lucania6
  13. Rignano Garganico5
  14. San Cesareo5
  15. Lipari5

Networks hosting the most

NetworkIPs
AS57558 METIS S.R.L. 101
AS3269 Telecom Italia S.p.A. 42
AS209353 Maurizio Giuseppe Fanari trading as LABEL SISTEMI TECNOLOGICI 30
AS30722 Fastweb SpA 22
AS200311 PRE WIFI SRL 22
AS12874 Fastweb SpA 18
AS1267 WIND TRE S.P.A. 13
AS210238 Dieffeitalia.it S.r.l. 13
AS197650 AirMax S.r.l. 11
AS49605 Digital Telecommunication Services S.r.l. 10
AS210278 Sky Italia srl 8
AS60017 FASTLINES SRL 8
AS31034 Aruba S.p.A. 7
AS206182 Global Com Basilicata s.r.l. 6
AS56911 Warian S.R.L. 5

Malware families served from Italy

  1. Brute Ratel C43
  2. Phorpiex2
  3. Loki2
  4. Stop2
  5. Banload2
  6. Chaos1
  7. Mirai1
  8. AdaptixC21
  9. Scar1
  10. PureRAT1
  11. Jalapeno1
  12. Jackskid1
  13. Potassium1
  14. Sybici1
  15. Abracadabra1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
185.68.178[.]211AttackerAttacking hostRome, LazioAS3257 GTT Communications Inc.1 feed2026-10-12 08:20
217.26.179[.]170AttackerAttacking hostMogorella, SardiniaAS209353 Maurizio Giuseppe Fanari trading as LABEL SISTEMI TECNOLOGICI1 feed2026-10-12 07:50
81.22.225[.]200AttackerAttacking hostNoci, ApuliaAS210238 Dieffeitalia.it S.r.l.1 feed2026-10-12 07:15
217.26.179[.]35AttackerAttacking hostMogorella, SardiniaAS209353 Maurizio Giuseppe Fanari trading as LABEL SISTEMI TECNOLOGICI1 feed2026-10-12 06:41
31.13.136[.]104AttackerAttacking hostTrequanda, TuscanyAS49605 Digital Telecommunication Services S.r.l.1 feed2026-10-12 06:10
185.197.9[.]45AttackerAttacking hostTito, BasilicateAS57558 METIS S.R.L.1 feed2026-10-12 05:35
101.56.198[.]207AttackerAttacking hostCandelara, The MarchesAS210278 Sky Italia srl2 feeds2026-10-12 04:35
101.59.36[.]63AttackerAttacking hostAlessandria, PiedmontAS210278 Sky Italia srl2 feeds2026-10-12 04:35
109.104.230[.]30AttackerAttacking hostSolofra, CampaniaAS48500 Irpinia Net-Com SRL2 feeds2026-10-12 04:35
151.59.5[.]3AttackerAttacking hostCastellaneta, ApuliaAS1267 WIND TRE S.P.A.3 feeds2026-10-12 04:35
151.59.7[.]174AttackerAttacking hostMarzanello, CampaniaAS1267 WIND TRE S.P.A.2 feeds2026-10-12 04:35
158.173.191[.]19AttackerAttacking hostNaples, CampaniaAS137409 GSL Networks Pty LTD2 feeds2026-10-12 04:35
185.132.230[.]231AttackerAttacking hostSan Pietro Piturno, ApuliaAS210238 Dieffeitalia.it S.r.l.2 feeds2026-10-12 04:35
185.15.169[.]16AttackerAttacking hostPotenza, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35
185.15.170[.]195AttackerAttacking hostBaragiano, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35
185.15.170[.]244AttackerAttacking hostBaragiano, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35
185.15.170[.]89AttackerAttacking hostBaragiano, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35
185.15.171[.]107AttackerAttacking hostPicerno, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35
185.15.171[.]169AttackerAttacking hostPicerno, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35
185.15.171[.]184AttackerAttacking hostPicerno, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35
185.15.171[.]198AttackerAttacking hostPicerno, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35
185.15.171[.]41AttackerAttacking hostPicerno, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35
185.15.171[.]43AttackerAttacking hostPicerno, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35
185.156.234[.]157AttackerAttacking hostRignano Garganico, ApuliaAS60017 FASTLINES SRL2 feeds2026-10-12 04:35
185.197.8[.]111AttackerAttacking hostRuoti, BasilicateAS57558 METIS S.R.L.2 feeds2026-10-12 04:35

See every listed IP in Italy →

Ransomware victims in Italy

26 posted in the last 30 days, 94 in 90.

Posted (UTC)VictimGroupSector
2026-10-09 14:15Melchioni SpaqilinManufacturing
2026-10-06 16:21Greggio ArgentoDeadlockAgriculture and Food Production
2026-10-05 19:36halservice.itsafepayProfessional Services
2026-10-01 15:20steelcoAuditTeamManufacturing
2026-10-01 15:20ProMind ITAuditTeamTechnology
2026-09-30 13:32Astidental di SabbionelamashtuManufacturing
2026-09-30 03:39QUALITY SPORT Topsport ItaliathegentlemenRetail & E-Commerce
2026-09-29 12:50Paid Victim 32373FFB7AF7E725AuditTeam—
2026-09-26 08:47StMicroelectronicsthegentlemenTechnology
2026-09-25 12:36corisricambi.itlockbit5Other
2026-09-24 13:21ItalyImNotAVillainGovernment & Defense
2026-09-23 10:21COSEF - Consorzio di Sviluppo Economico del FriuliBooba ProjectOther
2026-09-22 12:52DI.C.S.EL. S.R.L.akiraManufacturing
2026-09-22 11:50Pr***ITAuditTeamProfessional Services
2026-09-22 10:18Columbus InformaticaqilinTechnology

All ransomware victims in Italy →

Other countries