🇮🇳 India: live cyber threat activity

Malicious IPs, malware and ransomware victims in India.

2,068Malicious IPs listed#7 of 182 countries · 3.13% of the world
442New in the last 24hfirst seen by any feed
591Reported by 2+ feedsindependent sources agree
17Ransomware victimsposted in the last 30 days

View India on the live map →All listed IPs in IndiaRansomware victims in India

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C229
  2. Malware367
  3. Phishing0
  4. Attacker1,672

By state or region

  1. Maharashtra472
  2. Karnataka335
  3. Delhi291
  4. Tamil Nadu131
  5. Uttar Pradesh121
  6. Haryana121
  7. Telangana112
  8. Gujarat107
  9. Bihar51
  10. Rajasthan50
  11. Punjab49
  12. West Bengal46
  13. Madhya Pradesh40
  14. Kerala31
  15. Andhra Pradesh26

By city

  1. Bengaluru263
  2. New Delhi209
  3. Mumbai173
  4. Navi Mumbai91
  5. Delhi50
  6. Hyderabad44
  7. Pune40
  8. Gadchiroli32
  9. Mangaluru30
  10. Jalandhar30
  11. Chennai29
  12. Desāīganj29
  13. Ahmedabad24
  14. Jaipur23
  15. Surat23

Networks hosting the most

NetworkIPs
AS9829 Bharat Sanchar Nigam Ltd 305
AS24560 Bharti Airtel Limited 187
AS9498 Bharti Airtel Limited 182
AS55836 Reliance Jio Infocomm Limited 157
AS17813 Mahanagar Telephone Nigam Limited 87
AS14061 DigitalOcean, LLC 82
AS133661 Netplus Broadband Services Private Limited 39
AS8075 Microsoft Corporation 36
AS45609 Bharti Airtel Limited 31
AS45916 Gujarat Telelink Pvt Ltd 30
AS17488 HATHWAY CABLE AND DATACOM LIMITED 26
AS31898 Oracle Corporation 26
AS45820 TTSL-ISP DIVISION 22
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 21
AS134032 INFONET COMM ENTERPRISES 19

Malware families served from India

  1. Jackskid5
  2. PureRAT3
  3. pupy3
  4. Abracadabra3
  5. Emotet2
  6. W97m2
  7. Gandcrab2
  8. Remus2
  9. AdaptixC22
  10. Jaik1
  11. Zard1
  12. Shortcut1
  13. Akgpp1
  14. Havoc1
  15. Dorifel1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
103.172.210[.]133AttackerAttacking hostWarangal, TelanganaAS134033 Mithril Telecommunications Private Limited1 feed2026-10-12 08:20
103.183.90[.]233AttackerAttacking hostAmravati, MaharashtraAS133007 UCN CABLE NETWORK PVT. LTD1 feed2026-10-12 08:20
103.74.220[.]10AttackerAttacking hostBikaner, RajasthanAS135873 Jmd Internet And Services Pvt Ltd1 feed2026-10-12 08:20
106.219.227[.]226AttackerAttacking hostBādshāhpur, HaryanaAS45609 Bharti Airtel Limited1 feed2026-10-12 08:20
117.194.124[.]248AttackerAttacking hostBengaluru, KarnatakaAS9829 Bharat Sanchar Nigam Ltd1 feed2026-10-12 08:20
122.168.2[.]247AttackerAttacking hostBayānpur, HaryanaAS24560 Bharti Airtel Limited1 feed2026-10-12 08:20
122.168.4[.]49AttackerAttacking hostPanipat, HaryanaAS24560 Bharti Airtel Limited1 feed2026-10-12 08:20
122.187.229[.]160AttackerAttacking hostNew Delhi, DelhiAS9498 Bharti Airtel Limited1 feed2026-10-12 08:20
14.99.117[.]118AttackerAttacking hostBādshāhpur, HaryanaAS45820 TTSL-ISP DIVISION1 feed2026-10-12 08:20
152.59.146[.]217AttackerAttacking hostNavi Mumbai, MaharashtraAS55836 Reliance Jio Infocomm Limited1 feed2026-10-12 08:20
157.119.214[.]142AttackerAttacking hostFaridabad, HaryanaAS134316 IAXN Telecom Pvt. Ltd.1 feed2026-10-12 08:20
223.180.182[.]165AttackerAttacking hostPrayagraj, Uttar PradeshAS45609 Bharti Airtel Limited1 feed2026-10-12 08:20
223.184.152[.]74AttackerAttacking hostLucknow, Uttar PradeshAS45609 Bharti Airtel Limited1 feed2026-10-12 08:20
2401[:]4900[:]d148[:]c31f[:]4c75[:]2bc7[:]29c5[:]9027AttackerAttacking hostRaxaul, BiharAS45609 Bharti Airtel Limited1 feed2026-10-12 08:20
2409[:]40d0[:]1398[:]a19e[:]b4c1[:]95c2[:]6e58[:]9551AttackerAttacking hostPyāla, HaryanaAS55836 Reliance Jio Infocomm Limited1 feed2026-10-12 08:20
49.37.73[.]167AttackerAttacking hostNavi Mumbai, MaharashtraAS55836 Reliance Jio Infocomm Limited1 feed2026-10-12 08:20
168.144.112[.]61AttackerAttacking hostPhulwari Sharif, BiharAS14061 DigitalOcean, LLC1 feed2026-10-12 08:10
168.144.95[.]14AttackerAttacking hostBengaluru, KarnatakaAS14061 DigitalOcean, LLC1 feed2026-10-12 08:10
206.189.128[.]250AttackerAttacking hostBengaluru, KarnatakaAS14061 DigitalOcean, LLC1 feed2026-10-12 08:10
103.86.173[.]95AttackerAttacking hostBhorgarh, DelhiAS134341 jdm broadband services pvt ltd1 feed2026-10-12 07:55
14.139.59[.]212AttackerAttacking hostNew Delhi, DelhiAS55824 National Knowledge Network1 feed2026-10-12 07:55
66.116.251[.]167AttackerAttacking hostMumbai, MaharashtraAS31898 Oracle Corporation1 feed2026-10-12 07:55
103.152.79[.]123MalwareZardJaipur, RajasthanAS140641 YOTTA NETWORK SERVICES PRIVATE LIMITED1 feed · 125 sandbox samples2026-10-12 07:53
1.38.153[.]175AttackerAttacking hostAhmedabad, GujaratAS38266 Vodafone Idea Ltd. (VIL)1 feed2026-10-12 07:50
1.38.43[.]124AttackerAttacking hostSurendranagar, GujaratAS38266 Vodafone Idea Ltd. (VIL)1 feed2026-10-12 07:50

See every listed IP in India →

Ransomware victims in India

17 posted in the last 30 days, 76 in 90.

Posted (UTC)VictimGroupSector
2026-10-09 19:22Majestic Holidays India Private LimitedthegentlemenHospitality
2026-10-08 20:29Manipal Academy of Higher EduUmBraEducation
2026-10-08 20:28IIT RoorkeeUmBraEducation
2026-10-08 17:53simplexengg.inEclipseManufacturing
2026-10-05 15:22part02.simplexengg.inEclipseTechnology
2026-10-02 09:31www.raajratna.comkrybitRetail & E-Commerce
2026-10-02 09:30sai.org.inkrybitEducation
2026-09-28 18:46Chem Process Systems Pvt. Ltd.DoommageddonManufacturing
2026-09-22 11:51vit.ac.inAuditTeamEducation
2026-09-20 14:21Siddhi Green Excellence Pvt. LtdOrovaEnergy & Utilities
2026-09-15 07:16IndicthegentlemenTechnology
2026-09-15 07:11BGR Energy SystemsthegentlemenEnergy & Utilities
2026-09-13 09:50vi***inAuditTeamTransportation
2026-09-13 00:53INCOR GroupDoommageddonOther
2026-09-12 13:51Nexbex Solutions Private Limitedemperador—

All ransomware victims in India →

Other countries