India (IN) Threat Intelligence

IN

India has 406,369 malicious IP addresses with 7,049,706 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: Bharti Airtel Ltd., Telemedia Services (71,394 IPs), Reliance Jio Infocomm Limited (68,206 IPs), National Internet Backbone (33,340 IPs). Data collected since 2022-09-05, last activity 2026-10-04.

Threat Assessment: India is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Bharti Airtel Ltd., Telemedia Services and Reliance Jio Infocomm Limited.

Total Reports
7,049,706
Unique IPs
406,369
First Seen
2022-09-05
Last Activity
2026-10-04

Top Threat Categories

Tcp Scan 773,916
Suspicious Activity 381,617
High Threat 216,498
Malware Distribution 169,715
Intrusion Attempt 101,781

Top Attacking Networks

AS24560 Bharti Airtel Ltd., Telemedia Services
71,394 IPs
AS55836 Reliance Jio Infocomm Limited
68,206 IPs
AS9829 National Internet Backbone
33,340 IPs

Most Reported IPs in India

103.123.53.88 1,381 reports
103.25.47.94 1,372 reports
106.51.92.114 1,369 reports
183.82.111.224 1,368 reports
49.204.74.149 1,365 reports

Access this data via API

Get India threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/IN

View full API documentation

See how we classify and verify threats →

Check any IP from India

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS24560 Intelligence AS55836 Intelligence AS9829 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...