Malicious IPs in India
IPv4 networks located in India that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
India at a glance
India had 1,569 flagged IPv4 networks in the snapshot of 2026-10-11, rank #3 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 37.3 flagged networks per million addresses, rank #9 of 76, 4.0 times the median of 9.38 across all rated countries. The largest category is brute force sources with 49% of the flagged networks, followed by other malicious networks (23%). The three networks (ASNs) with the most flagged IPs hold 35% of them, led by AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services (AS24560). Another 218 flagged IPv6 networks are located in India.
Malicious activity in India by category
A network listed in several categories counts once, in the most specific one. Also flagged: 218 IPv6 networks.
Brute force sources in India
764 (49%)764 flagged networks, #4 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
Other malicious networks in India
357 (23%)357 flagged networks, #3 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country
Botnet hosts in India
351 (22%)351 flagged networks, #1 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
Spam sources in India
74 (5%)74 flagged networks, #4 of 89 countries for spam sources. Sources of email spam. Spam Sources by Country
Scanners in India
18 (1%)18 flagged networks, #11 of 40 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country
C2 servers in India
5 (0%)5 flagged networks, #18 of 51 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country
Networks with the most flagged IPs in India
Autonomous systems announcing the flagged networks located in India.
| # | Network | Flagged networks |
|---|---|---|
| 1 | AS24560AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services | 208 |
| 2 | AS55836RELIANCEJIO-IN Reliance Jio Infocomm Limited | 201 |
| 3 | AS9829BSNL-NIB National Internet Backbone | 144 |
| 4 | AS9498BBIL-AP BHARTI Airtel Ltd. | 100 |
| 5 | AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation | 37 |
| 6 | AS45609BHARTI-MOBILITY-AS-AP Bharti Airtel Ltd. AS for GPRS Service | 36 |
| 7 | AS14061DIGITALOCEAN-ASN - DigitalOcean, LLC | 35 |
| 8 | AS45916GTPL-AS-AP Gujarat Telelink Pvt Ltd | 24 |
| 9 | AS18209CABLELITE-AS-AP Atria Convergence Technologies Ltd. | 23 |
| 10 | AS133982EXCITEL-AS-IN Excitel Broadband Private Limited | 18 |
Compare India with other countries
Ranked by flagged networks per million allocated IPv4 addresses.
Countries ranked next to India by rate
| # | Country | Networks | Per million |
|---|---|---|---|
| 7 | Albania | 26 | 51.4 |
| 8 | Sri Lanka | 24 | 42.6 |
| 9 | India | 1,569 | 37.3 |
| 10 | Hong Kong SAR China | 503 | 31.2 |
| 11 | Jordan | 20 | 30.9 |
| 12 | Azerbaijan | 24 | 30.0 |
Other countries in the APNIC region
| # | Country | Networks | Per million |
|---|---|---|---|
| 3 | Bangladesh | 149 | 71.3 |
| 4 | Pakistan | 385 | 67.8 |
| 5 | Nepal | 36 | 61.5 |
| 8 | Sri Lanka | 24 | 42.6 |
| 10 | Hong Kong SAR China | 503 | 31.2 |
| 16 | Philippines | 150 | 23.9 |
| 19 | Vietnam | 336 | 20.4 |
| 21 | Indonesia | 375 | 19.3 |
Questions about India
- How many malicious IP addresses are there in India?
- On 2026-10-11, 1,569 IPv4 networks (/24 blocks) located in India were flagged for malicious activity, with 4,814 listed IPv4 addresses and 218 IPv6 networks. Each /24 counts once, however many of its addresses are listed.
- Which networks in India host the most flagged IPs?
- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services (AS24560, 208 networks), RELIANCEJIO-IN Reliance Jio Infocomm Limited (AS55836, 201 networks), BSNL-NIB National Internet Backbone (AS9829, 144 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in India or anywhere else with one API call.