Nepal (NP) Threat Intelligence

NP

Nepal has 10,176 malicious IP addresses with 131,690 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, intrusion attempt, malware distribution. Top attacking networks: WorldLink Communications Pvt Ltd (2,451 IPs), Nepal Telecommunications Corporation, Internet Services, (1,842 IPs), Subisu Cablenet Pvt Ltd, Baluwatar, Kathmandu, Nepal (1,039 IPs). Data collected since 2025-03-19, last activity 2026-10-12.

Threat Assessment: Nepal shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by WorldLink Communications Pvt Ltd and Nepal Telecommunications Corporation, Internet Services,.

Total Reports
131,690
Unique IPs
10,176
First Seen
2025-03-19
Last Activity
2026-10-12

Top Threat Categories

Tcp Scan 17,384
Suspicious Activity 9,989
High Threat 6,233
Intrusion Attempt 4,674
Malware Distribution 4,166

Top Attacking Networks

AS17501 WorldLink Communications Pvt Ltd
2,451 IPs
AS23752 Nepal Telecommunications Corporation, Internet Services,
1,842 IPs
AS4007 Subisu Cablenet Pvt Ltd, Baluwatar, Kathmandu, Nepal
1,039 IPs

Most Reported IPs in Nepal

103.130.207.227 1,209 reports
157.10.100.12 1,196 reports
202.70.78.237 1,163 reports
157.119.70.200 1,032 reports
161.248.217.23 889 reports

Access this data via API

Get Nepal threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/NP

View full API documentation

See how we classify and verify threats →

Check any IP from Nepal

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS17501 Intelligence AS23752 Intelligence AS4007 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...