Top Malicious IP Addresses — Last 24 Hours

These are the 50 most frequently reported IP addresses in the last 24 hours, ranked by the number of independent abuse reports received from our threat intelligence network. Each IP has been flagged by automated threat detection systems and verified reporters.

24 Hours 7 Days 30 Days
# IP Address Reports Severity Categories Country Network
1 5.182.210.174 49 HIGH malware c2 The Netherlands SpectraIP B.V.
2 80.94.92.128 27 MEDIUM ssh bruteforce Romania Unmanaged Ltd
3 2.26.81.46 19 HIGH botnet c2 Germany Play2go International Limited
4 195.178.110.30 18 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
5 176.65.139.130 17 HIGH botnet c2 Germany Storm Industries LLC
6 176.65.139.132 14 HIGH botnet c2 Germany Storm Industries LLC
7 45.148.10.141 13 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
8 94.154.43.67 12 HIGH botnet c2 The Netherlands Storm Industries LLC
9 45.148.10.152 12 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
10 31.57.184.154 12 HIGH malware c2 United States VPS Dedicated LLC
11 45.148.10.157 12 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
12 68.64.182.169 12 HIGH malware c2 United States LUCIDACLOUD LIMITED
13 185.93.89.72 11 HIGH botnet c2 Iran Limited Network LTD
14 45.38.249.63 10 HIGH botnet c2 United States Cloud Software - FZCO
15 45.148.10.147 10 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
16 45.148.10.151 9 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
17 104.243.248.63 9 HIGH malware c2 Germany Voxility LLP
18 80.94.92.128 8 MEDIUM generic bruteforce Romania Unmanaged Ltd
19 116.110.220.29 7 MEDIUM ssh bruteforce Vietnam Viettel Corporation
20 195.178.110.137 7 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
21 171.243.149.137 7 MEDIUM ssh bruteforce Vietnam Viettel Group
22 159.203.69.210 7 HIGH malware c2 United States DigitalOcean, LLC
23 54.38.94.225 7 HIGH malware c2 France OVH SAS
24 171.243.150.14 7 MEDIUM ssh bruteforce Vietnam Viettel Group
25 45.142.193.164 7 HIGH ssh bruteforce Romania Iic Rail Limited
26 31.76.20.19 7 HIGH malware c2 Germany Play2go International Limited
27 91.92.242.236 7 HIGH malware c2 The Netherlands Omegatech LTD
28 172.94.18.103 7 HIGH malware c2 Germany M247 Europe SRL
29 130.12.182.39 7 HIGH malware c2 Slovenia VPS Dedicated LLC
30 171.231.199.121 7 MEDIUM ssh bruteforce Vietnam Viettel Group
31 195.178.110.232 6 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
32 77.239.124.102 6 MEDIUM ssh bruteforce The Netherlands Banatsync Srl
33 157.20.182.18 6 HIGH malware c2 The Netherlands Hosterdaddy Private Limited
34 2.57.121.25 6 MEDIUM ssh bruteforce Romania Unmanaged Ltd
35 195.178.110.30 6 MEDIUM generic bruteforce Bulgaria Techoff Srv Limited
36 209.99.190.23 6 HIGH malware c2 Switzerland SKN Subnet & Telecom Ltd
37 144.31.30.228 6 HIGH botnet c2 The Netherlands Play2go International Limited
38 157.20.182.21 6 HIGH malware c2 The Netherlands Hosterdaddy Private Limited
39 209.200.246.194 5 HIGH malware c2 Canada Regxa Company for Information Technology Ltd
40 2.57.121.112 5 HIGH ssh bruteforce Romania Unmanaged Ltd
41 193.46.255.86 5 MEDIUM ssh bruteforce Romania Unmanaged Ltd
42 45.148.10.240 5 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
43 37.72.172.58 5 HIGH malware c2 United States HIVELOCITY, Inc.
44 169.58.82.229 5 HIGH malware c2 France Contabo GmbH
45 217.60.36.94 5 HIGH malware c2 France Cgi Global Limited
46 89.42.134.220 5 HIGH malware c2 Italy NetJoin srl
47 203.98.68.17 5 HIGH malware c2 United Kingdom HosterDaddy Private Limited
48 157.20.182.22 5 HIGH malware c2 The Netherlands Hosterdaddy Private Limited
49 147.93.191.75 5 HIGH malware c2 United States Contabo Inc.
50 140.143.239.224 5 HIGH malware c2 China Shenzhen Tencent Computer Systems Company Limited

About This Data

This ranking is compiled from abuse reports submitted by a network of verified threat reporters, automated monitoring systems, and threat intelligence feeds including curated blocklists, community abuse databases, and malware trackers. IP addresses that appear on this list have been independently verified by multiple sources. The data updates in real-time and reflects the most actively malicious IP addresses targeting internet infrastructure worldwide.

Use the WAYSCloud API to check any IP address programmatically, or search directly using the threat intelligence dashboard.

Latest Cyber Attacks → ASN Threat Ranking → Country Risk Trends → Country Threat Ranking → Live Threat Map → AI Threat Forecast →