🇳🇵 Nepal: live cyber threat activity

Malicious IPs, malware and ransomware victims in Nepal.

48Malicious IPs listed#66 of 182 countries · 0.07% of the world
23New in the last 24hfirst seen by any feed
19Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Nepal on the live map →All listed IPs in Nepal

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C20
  2. Malware3
  3. Phishing0
  4. Attacker45

By state or region

  1. Bagmati Province29
  2. Madhesh6
  3. Gandaki Pradesh5
  4. Koshi5
  5. Lumbini Province3

By city

  1. Patan14
  2. Kathmandu13
  3. Pokhara4
  4. Īṭahari̇̄2
  5. Dharān2
  6. Lahān2
  7. Birgunj2
  8. Butwal1
  9. Hetauda1
  10. Madhyapur Thimi1
  11. Biratnagar1
  12. Rājbirāj1
  13. Chame1
  14. Gaur1
  15. Butwāl1

Networks hosting the most

NetworkIPs
AS17501 WorldLink Communications 16
AS23752 Nepal Telecommunications Corporation 7
AS4007 Subisu Cablenet 6
AS24550 Websurfer Nepal Communication System Pvt. Ltd 5
AS150331 Beni Communication Private Limited 2
AS136380 Web Networks Pvt. Ltd. 2
AS45650 VIA NET COMMUNICATION PUBLIC LIMITED 2
AS138350 PRABHU DIGITAL PUBLIC LIMITED 1
AS151396 Sajilo Net Pvt Ltd 1
AS139922 DISH MEDIA NETWORK PUBLIC LIMITED 1
AS152307 DataWorld 1
AS141767 C G Communications Ltd 1
AS153694 Silverlining Private Limited 1
AS38565 Ncell Pty. Ltd. 1
AS55915 Classic Tech Pvt. Ltd. 1

Malware families served from Nepal

No malware family attributed to IPs here.

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
2403[:]3800[:]2206[:]2ffb[:]ad39[:]7a52[:]f6be[:]3f5cAttackerAttacking hostGaur, MadheshAS4007 Subisu Cablenet1 feed2026-10-12 08:20
2407[:]1400[:]b000[:]4900[:]54e0[:]512d[:]e4d8[:]33e3AttackerAttacking hostPatan, Bagmati ProvinceAS23752 Nepal Telecommunications Corporation1 feed2026-10-12 08:20
49.244.244[.]159AttackerAttacking hostPatan, Bagmati ProvinceAS23752 Nepal Telecommunications Corporation1 feed2026-10-12 08:20
103.86.56[.]83AttackerAttacking hostButwal, Lumbini ProvinceAS136380 Web Networks Pvt. Ltd.1 feed2026-10-12 07:50
2407[:]1400[:]b001[:]ad00[:]54e0[:]512d[:]e4d8[:]33e3AttackerAttacking hostPatan, Bagmati ProvinceAS23752 Nepal Telecommunications Corporation1 feed2026-10-12 07:50
103.134.218[.]165AttackerAttacking hostĪṭahari̇̄, KoshiAS151396 Sajilo Net Pvt Ltd1 feed2026-10-12 06:41
124.41.228[.]116AttackerAttacking hostHetauda, Bagmati ProvinceAS17501 WorldLink Communications1 feed2026-10-12 05:00
202.166.198[.]189AttackerAttacking hostPatan, Bagmati ProvinceAS17501 WorldLink Communications1 feed2026-10-12 04:50
103.13.194[.]81AttackerAttacking hostPokhara, Gandaki PradeshAS150331 Beni Communication Private Limited2 feeds2026-10-12 04:35
103.13.194[.]88AttackerAttacking hostPokhara, Gandaki PradeshAS150331 Beni Communication Private Limited2 feeds2026-10-12 04:35
139.5.71[.]26AttackerAttacking hostMadhyapur Thimi, Bagmati ProvinceAS17501 WorldLink Communications2 feeds2026-10-12 04:35
202.51.69[.]31AttackerAttacking hostPatan, Bagmati ProvinceAS4007 Subisu Cablenet2 feeds2026-10-12 04:35
2400[:]1a00[:]4ba1[:]5d26[:]5433[:]9bf3[:]f5e4[:]688eAttackerAttacking hostKathmandu, Bagmati ProvinceAS17501 WorldLink Communications2 feeds2026-10-12 04:35
2407[:]1400[:]aa35[:]3628[:]1de0[:]9850[:]c585[:]bc2fAttackerAttacking hostPatan, Bagmati ProvinceAS23752 Nepal Telecommunications Corporation2 feeds2026-10-12 04:35
2407[:]1400[:]aa3f[:]57d0[:]a5c3[:]ae84[:]d3a6[:]9b02AttackerAttacking hostKathmandu, Bagmati ProvinceAS23752 Nepal Telecommunications Corporation2 feeds2026-10-12 04:35
2407[:]1400[:]b000[:]d2e8[:]e8f9[:]3408[:]4321[:]b16eAttackerAttacking hostPatan, Bagmati ProvinceAS23752 Nepal Telecommunications Corporation2 feeds2026-10-12 04:35
27.34.67[.]175AttackerAttacking hostGhorahi, Lumbini ProvinceAS17501 WorldLink Communications2 feeds2026-10-12 04:35
27.34.70[.]35AttackerAttacking hostBirgunj, MadheshAS17501 WorldLink Communications2 feeds2026-10-12 04:35
36.253.9[.]128AttackerAttacking hostPatan, Bagmati ProvinceAS38565 Ncell Pty. Ltd.2 feeds2026-10-12 04:35
45.64.160[.]83AttackerAttacking hostKathmandu, Bagmati ProvinceAS55915 Classic Tech Pvt. Ltd.2 feeds2026-10-12 04:35
49.244.243[.]209AttackerAttacking hostPatan, Bagmati ProvinceAS23752 Nepal Telecommunications Corporation2 feeds2026-10-12 04:35
188.253.102[.]92AttackerAttacking hostChame, Gandaki PradeshAS45650 VIA NET COMMUNICATION PUBLIC LIMITED1 feed2026-10-12 04:05
27.34.69[.]150AttackerAttacking hostLahān, MadheshAS17501 WorldLink Communications1 feed2026-10-11 18:15
103.191.131[.]185AttackerAttacking hostĪṭahari̇̄, KoshiAS139922 DISH MEDIA NETWORK PUBLIC LIMITED2 feeds2026-10-11 04:31
163.223.99[.]144AttackerAttacking hostKathmandu, Bagmati ProvinceAS153694 Silverlining Private Limited2 feeds2026-10-11 04:31

See every listed IP in Nepal →

Ransomware victims in Nepal

No ransomware victims from Nepal posted in the last 90 days.

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →