India (IN) Threat Intelligence

IN

India has 417,956 malicious IP addresses with 7,200,912 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: Bharti Airtel Ltd., Telemedia Services (73,456 IPs), Reliance Jio Infocomm Limited (70,281 IPs), National Internet Backbone (34,687 IPs). Data collected since 2022-09-05, last activity 2026-10-12.

Threat Assessment: India is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Bharti Airtel Ltd., Telemedia Services and Reliance Jio Infocomm Limited.

Total Reports
7,200,912
Unique IPs
417,956
First Seen
2022-09-05
Last Activity
2026-10-12

Top Threat Categories

Tcp Scan 796,944
Suspicious Activity 402,305
High Threat 290,994
Malware Distribution 176,633
Intrusion Attempt 112,150

Top Attacking Networks

AS24560 Bharti Airtel Ltd., Telemedia Services
73,456 IPs
AS55836 Reliance Jio Infocomm Limited
70,281 IPs
AS9829 National Internet Backbone
34,687 IPs

Most Reported IPs in India

103.123.53.88 1,598 reports
106.51.92.114 1,588 reports
103.88.76.27 1,588 reports
103.25.47.94 1,586 reports
49.204.74.149 1,582 reports

Access this data via API

Get India threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/IN

View full API documentation

See how we classify and verify threats →

Check any IP from India

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS24560 Intelligence AS55836 Intelligence AS9829 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...