Netherlands (NL) Threat Intelligence

NL

Netherlands has 164,460 malicious IP addresses with 7,297,310 abuse reports. Top threat categories include tcp scan, high threat, suspicious activity, malware distribution, severe abuse. Top attacking networks: DigitalOcean, LLC (53,086 IPs), Google LLC (11,049 IPs), 1337 Services GmbH (5,921 IPs). Data collected since 2022-12-05, last activity 2026-10-13.

Threat Assessment: Netherlands is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are tcp scan, high threat, suspicious activity. The majority of threats originate from networks operated by DigitalOcean, LLC and Google LLC.

Total Reports
7,297,310
Unique IPs
164,460
First Seen
2022-12-05
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 837,801
High Threat 612,807
Suspicious Activity 382,511
Malware Distribution 136,261
Severe Abuse 41,578

Top Attacking Networks

AS14061 DigitalOcean, LLC
53,086 IPs
AS396982 Google LLC
11,049 IPs
AS210558 1337 Services GmbH
5,921 IPs

Most Reported IPs in Netherlands

45.148.10.230 4,674 reports
142.93.136.140 2,753 reports
51.158.205.203 2,579 reports
45.148.10.141 2,464 reports
45.148.10.152 2,461 reports

Access this data via API

Get Netherlands threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/NL

View full API documentation

See how we classify and verify threats →

Check any IP from Netherlands

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS14061 Intelligence AS396982 Intelligence AS210558 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...