Top Malicious IP Addresses — Last 24 Hours

These are the 50 most frequently reported IP addresses in the last 24 hours, ranked by the number of independent abuse reports received from our threat intelligence network. Each IP has been flagged by automated threat detection systems and verified reporters.

24 Hours 7 Days 30 Days
# IP Address Reports Severity Categories Country Network
1 68.209.56.42 128 MEDIUM tcp scan The Netherlands B2 Net Solutions Inc.
2 196.244.192.202 94 MEDIUM tcp scan Finland Orion Network Limited
3 45.148.10.230 86 MEDIUM tcp scan The Netherlands Techoff Srv Limited
4 142.93.136.140 60 MEDIUM tcp scan The Netherlands DigitalOcean, LLC
5 193.187.110.159 49 MEDIUM tcp scan Türkiye FAST ZONE IT
6 62.60.130.219 45 MEDIUM tcp scan Iran Cipher Operations Doo Beograd - Novi Beograd
7 62.60.130.148 41 MEDIUM tcp scan Iran Cipher Operations Doo Beograd - Novi Beograd
8 34.38.168.248 36 MEDIUM tcp scan Belgium Google LLC
9 185.231.33.82 34 MEDIUM tcp scan Seychelles Datashield, Inc.
10 178.20.210.151 33 MEDIUM tcp scan Germany Shereverov Marat Ahmedovich
11 77.239.124.130 33 MEDIUM tcp scan United States Banatsync Srl
12 34.79.79.205 32 MEDIUM tcp scan Belgium Google LLC
13 213.209.159.26 32 MEDIUM tcp scan Germany Feo Prest SRL
14 79.124.56.214 30 MEDIUM tcp scan Bulgaria Tamatiya EOOD
15 103.203.59.9 29 MEDIUM tcp scan China Beijing Tiantexin Tech. Co., Ltd.
16 77.90.185.16 29 MEDIUM tcp scan Germany Limited Network LTD
17 45.148.10.240 28 MEDIUM tcp scan The Netherlands Techoff Srv Limited
18 103.164.57.37 26 HIGH high threat Indonesia PT Natha Buana Indonesia
19 43.156.115.178 26 HIGH high threat Singapore Tencent Building, Kejizhongyi Avenue
20 93.185.162.26 26 HIGH high threat Indonesia Cyberzone S.A.
21 45.121.25.115 26 CRITICAL high threat Vietnam MOBIFONE Corporation
22 129.121.94.183 26 HIGH high threat United Kingdom Oracle Corporation
23 113.137.40.250 26 CRITICAL high threat China CHINANET SHAANXI province Cloud Base network
24 157.245.34.56 26 HIGH high threat United Kingdom DigitalOcean, LLC
25 118.36.136.12 26 CRITICAL high threat South Korea Korea Telecom
26 112.217.188.122 26 HIGH high threat South Korea LG DACOM Corporation
27 122.176.122.24 26 HIGH high threat India Bharti Airtel Ltd., Telemedia Services
28 202.165.26.170 26 HIGH high threat Malaysia TM TECHNOLOGY SERVICES SDN. BHD.
29 192.169.232.223 26 HIGH high threat United States GoDaddy.com, LLC
30 202.165.15.132 26 HIGH high threat Malaysia TM TECHNOLOGY SERVICES SDN. BHD.
31 185.198.27.20 26 HIGH high threat France Contabo GmbH
32 103.189.208.13 26 HIGH high threat Vietnam TEDEV TECHNOLOGICAL DEVELOPMENT COMPANY LIMITED
33 144.225.187.68 26 CRITICAL high threat United States CNServer LLC
34 112.123.228.180 26 HIGH high threat China CHINA UNICOM China169 Backbone
35 46.253.45.10 26 HIGH high threat Spain Ingenieria y Suministros Profesionales, S.L.
36 122.15.129.26 26 HIGH high threat India Vodafone Idea Ltd
37 57.128.239.181 26 HIGH high threat Poland OVH SAS
38 188.187.56.170 26 HIGH high threat Russia JSC ER-Telecom Holding
39 211.106.133.202 26 HIGH high threat South Korea Korea Telecom
40 42.96.20.16 26 HIGH high threat Vietnam Branch of Long Van System Solution JSC - Hanoi
41 197.5.145.150 26 HIGH high threat Tunisia SOCIETE NATIONALE DES TELECOMMUNICATIONS (Tunisie Telecom)
42 129.121.135.214 26 CRITICAL high threat India Oracle Corporation
43 61.222.211.114 26 CRITICAL high threat Taiwan Data Communication Business Group
44 223.197.186.7 26 HIGH high threat Hong Kong HKT Limited
45 46.24.47.94 26 HIGH high threat Spain Vodafone Spain
46 80.251.156.20 25 HIGH high threat Russia MTS PJSC
47 81.23.173.32 25 HIGH high threat Russia MTS PJSC
48 152.32.182.41 25 HIGH high threat United States UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
49 81.192.46.29 25 CRITICAL high threat Morocco Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM
50 102.223.209.43 25 HIGH high threat Congo (DRC) Ets OliverSoft

About This Data

This ranking is compiled from abuse reports submitted by a network of verified threat reporters, automated monitoring systems, and threat intelligence feeds including curated blocklists, community abuse databases, and malware trackers. IP addresses that appear on this list have been independently verified by multiple sources. The data updates in real-time and reflects the most actively malicious IP addresses targeting internet infrastructure worldwide.

Use the WAYSCloud API to check any IP address programmatically, or search directly using the threat intelligence dashboard.

Latest Cyber Attacks → ASN Threat Ranking → Country Risk Trends → Country Threat Ranking → Live Threat Map → AI Threat Forecast →