Netherlands (NL) Threat Intelligence

Netherlands has 96,527 malicious IP addresses with 3,988,478 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, malware c2, web attack, mail bruteforce. Top attacking networks: DigitalOcean, LLC (37,807 IPs), DIGITALOCEAN-ASN (14,389 IPs), 1337 Services GmbH (3,584 IPs). Data collected since 2022-12-05, last activity 2026-04-16.

Threat Assessment: Netherlands shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, generic bruteforce, malware c2. The majority of threats originate from networks operated by DigitalOcean, LLC and DIGITALOCEAN-ASN.