India (IN) Threat Intelligence

IN

India has 168,958 malicious IP addresses with 3,616,793 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, web attack, rdp bruteforce, email abuse. Top attacking networks: Bharti Airtel Ltd., Telemedia Services (25,856 IPs), Reliance Jio Infocomm Limited (22,538 IPs), DigitalOcean, LLC (15,235 IPs). Data collected since 2022-09-05, last activity 2026-04-16.

Threat Assessment: India is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are ssh bruteforce, generic bruteforce, web attack. The majority of threats originate from networks operated by Bharti Airtel Ltd., Telemedia Services and Reliance Jio Infocomm Limited.

Total Reports
3,616,793
Unique IPs
168,958
First Seen
2022-09-05
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 4,997
Generic Bruteforce 564
Web Attack 453
Rdp Bruteforce 119
Email Abuse 106

Top Attacking Networks

AS24560 Bharti Airtel Ltd., Telemedia Services
25,856 IPs
AS55836 Reliance Jio Infocomm Limited
22,538 IPs
AS14061 DigitalOcean, LLC
15,235 IPs

Most Reported IPs in India

103.204.167.14 292 reports
136.232.11.10 277 reports
68.183.80.103 265 reports
20.193.141.133 264 reports
122.166.49.42 263 reports

Access this data via API

Get India threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/IN

View full API documentation

See how we classify and verify threats →

Check any IP from India

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS24560 Intelligence AS55836 Intelligence AS14061 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...