Top Malicious IP Addresses — Last 24 Hours

These are the 50 most frequently reported IP addresses in the last 24 hours, ranked by the number of independent abuse reports received from our threat intelligence network. Each IP has been flagged by automated threat detection systems and verified reporters.

24 Hours 7 Days 30 Days
# IP Address Reports Severity Categories Country Network
1 80.94.92.128 27 MEDIUM ssh bruteforce Romania Unmanaged Ltd
2 195.178.110.30 17 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
3 45.148.10.141 14 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
4 45.148.10.157 13 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
5 45.148.10.152 13 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
6 31.57.184.154 12 HIGH malware c2 United States VPS Dedicated LLC
7 68.64.182.169 12 HIGH malware c2 United States LUCIDACLOUD LIMITED
8 45.148.10.147 10 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
9 45.148.10.151 10 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
10 104.243.248.63 9 HIGH malware c2 Germany Voxility LLP
11 80.94.92.128 8 MEDIUM generic bruteforce Romania Unmanaged Ltd
12 172.94.18.103 7 HIGH malware c2 Germany M247 Europe SRL
13 171.243.149.137 7 MEDIUM ssh bruteforce Vietnam Viettel Group
14 116.110.220.29 7 MEDIUM ssh bruteforce Vietnam Viettel Corporation
15 171.243.150.14 7 MEDIUM ssh bruteforce Vietnam Viettel Group
16 54.38.94.225 7 HIGH malware c2 France OVH SAS
17 159.203.69.210 7 HIGH malware c2 United States DigitalOcean, LLC
18 171.231.199.121 7 MEDIUM ssh bruteforce Vietnam Viettel Group
19 195.178.110.137 7 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
20 130.12.182.39 7 HIGH malware c2 Slovenia VPS Dedicated LLC
21 77.239.124.102 6 MEDIUM ssh bruteforce The Netherlands Banatsync Srl
22 193.32.162.34 6 MEDIUM ssh bruteforce Romania Unmanaged Ltd
23 209.99.190.23 6 HIGH malware c2 Switzerland SKN Subnet & Telecom Ltd
24 45.142.193.164 6 HIGH ssh bruteforce Romania Iic Rail Limited
25 157.20.182.21 6 HIGH malware c2 The Netherlands Hosterdaddy Private Limited
26 195.178.110.232 6 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
27 157.20.182.18 6 HIGH malware c2 The Netherlands Hosterdaddy Private Limited
28 2.57.121.25 6 MEDIUM ssh bruteforce Romania Unmanaged Ltd
29 2.57.121.112 5 HIGH ssh bruteforce Romania Unmanaged Ltd
30 193.46.255.86 5 MEDIUM ssh bruteforce Romania Unmanaged Ltd
31 45.148.10.240 5 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
32 209.200.246.194 5 HIGH malware c2 Canada Regxa Company for Information Technology Ltd
33 93.152.223.39 5 HIGH malware c2 Bulgaria RMP Protection Limited
34 195.178.110.30 5 MEDIUM generic bruteforce Bulgaria Techoff Srv Limited
35 203.98.68.17 5 HIGH malware c2 United Kingdom HosterDaddy Private Limited
36 37.72.172.58 5 HIGH malware c2 United States HIVELOCITY, Inc.
37 147.93.191.75 5 HIGH malware c2 United States Contabo Inc.
38 157.20.182.22 5 HIGH malware c2 The Netherlands Hosterdaddy Private Limited
39 140.143.239.224 5 HIGH malware c2 China Shenzhen Tencent Computer Systems Company Limited
40 120.48.135.189 5 MEDIUM ssh bruteforce China Beijing Baidu Netcom Science and Technology Co., Ltd.
41 169.58.82.229 5 HIGH malware c2 France Contabo GmbH
42 89.42.134.220 5 HIGH malware c2 Italy NetJoin srl
43 102.0.33.90 4 HIGH reconnaissance Kenya Airtel Networks Kenya Limited
44 102.129.223.92 4 HIGH reconnaissance United States Datacamp Limited
45 1.12.233.51 4 HIGH reconnaissance China Shenzhen Tencent Computer Systems Company Limited
46 1.162.5.215 4 HIGH reconnaissance Taiwan Data Communication Business Group
47 101.200.57.251 4 HIGH reconnaissance China Hangzhou Alibaba Advertising Co.,Ltd.
48 100.29.192.12 4 HIGH reconnaissance United States Amazon.com, Inc.
49 1.251.80.19 4 HIGH reconnaissance South Korea SK Broadband Co Ltd
50 1.214.214.114 4 HIGH reconnaissance South Korea LG DACOM Corporation

About This Data

This ranking is compiled from abuse reports submitted by a network of verified threat reporters, automated monitoring systems, and threat intelligence feeds including curated blocklists, community abuse databases, and malware trackers. IP addresses that appear on this list have been independently verified by multiple sources. The data updates in real-time and reflects the most actively malicious IP addresses targeting internet infrastructure worldwide.

Use the WAYSCloud API to check any IP address programmatically, or search directly using the threat intelligence dashboard.

Latest Cyber Attacks → ASN Threat Ranking → Country Risk Trends → Country Threat Ranking → Live Threat Map → AI Threat Forecast →