Top Malicious IP Addresses — Last 24 Hours

These are the 50 most frequently reported IP addresses in the last 24 hours, ranked by the number of independent abuse reports received from our threat intelligence network. Each IP has been flagged by automated threat detection systems and verified reporters.

24 Hours 7 Days 30 Days
# IP Address Reports Severity Categories Country Network
1 92.88.98.199 26 HIGH botnet c2 France Societe Francaise Du Radiotelephone - SFR SA
2 213.209.159.56 18 HIGH ssh bruteforce Taiwan Feo Prest SRL
3 2.57.121.112 18 HIGH ssh bruteforce Romania Unmanaged Ltd
4 168.220.248.106 18 HIGH malware c2 India WEBYNE DATA CENTRE PRIVATE LIMITED
5 2.57.121.25 15 HIGH ssh bruteforce Romania Unmanaged Ltd
6 193.32.162.146 14 HIGH ssh bruteforce Romania Unmanaged Ltd
7 84.201.182.55 14 HIGH ssh bruteforce Russia Yandex.Cloud LLC
8 195.178.110.30 13 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
9 2.57.122.177 13 MEDIUM ssh bruteforce Romania Unmanaged Ltd
10 45.148.10.151 12 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
11 216.9.225.23 12 HIGH botnet c2 United States Fiba Cloud Operation Company, LLC
12 80.94.92.187 11 HIGH ssh bruteforce Romania Unmanaged Ltd
13 2.57.122.193 11 HIGH ssh bruteforce Romania Unmanaged Ltd
14 45.227.254.170 11 MEDIUM ssh bruteforce Panama Flyservers S.A.
15 80.94.92.165 10 HIGH ssh bruteforce Romania Unmanaged Ltd
16 45.148.10.141 10 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
17 45.148.10.152 10 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
18 162.214.75.117 10 MEDIUM ssh bruteforce United States Unified Layer
19 92.118.39.23 10 MEDIUM ssh bruteforce United States Unmanaged Ltd
20 80.94.92.164 9 HIGH ssh bruteforce Romania Unmanaged Ltd
21 2.57.122.195 9 HIGH ssh bruteforce Romania Unmanaged Ltd
22 92.118.39.235 9 MEDIUM ssh bruteforce Romania Unmanaged Ltd
23 92.118.39.195 9 MEDIUM ssh bruteforce Romania Unmanaged Ltd
24 80.94.92.166 9 HIGH ssh bruteforce Romania Unmanaged Ltd
25 2.57.122.192 9 HIGH ssh bruteforce Romania Unmanaged Ltd
26 92.118.39.236 9 MEDIUM ssh bruteforce Romania Unmanaged Ltd
27 92.118.39.63 9 MEDIUM ssh bruteforce United States Unmanaged Ltd
28 45.148.10.157 9 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
29 172.67.149.130 8 HIGH malware c2 Cloudflare, Inc.
30 2.57.122.189 8 HIGH ssh bruteforce Romania Unmanaged Ltd
31 2.57.122.197 8 HIGH ssh bruteforce Romania Unmanaged Ltd
32 104.21.71.174 8 HIGH malware c2 Cloudflare, Inc.
33 92.118.39.196 8 MEDIUM ssh bruteforce Romania Unmanaged Ltd
34 92.118.39.197 8 MEDIUM ssh bruteforce Romania Unmanaged Ltd
35 80.94.92.183 8 MEDIUM ssh bruteforce Romania Unmanaged Ltd
36 2.57.122.196 8 MEDIUM ssh bruteforce Romania Unmanaged Ltd
37 2.57.122.194 7 HIGH ssh bruteforce Romania Unmanaged Ltd
38 193.46.255.86 7 MEDIUM ssh bruteforce Romania Unmanaged Ltd
39 62.60.226.140 7 HIGH malware c2 Germany Femo It Solutions Limited
40 172.67.143.225 7 HIGH malware c2 Cloudflare, Inc.
41 45.148.10.147 7 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
42 45.148.10.121 6 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
43 80.94.92.167 6 HIGH ssh bruteforce Romania Unmanaged Ltd
44 104.21.91.210 6 HIGH malware c2 Cloudflare, Inc.
45 177.17.92.158 6 HIGH ssh bruteforce Brazil TELEFONICA BRASIL S.A
46 2.57.122.238 6 MEDIUM ssh bruteforce Romania Unmanaged Ltd
47 172.67.190.194 6 HIGH malware c2 Cloudflare, Inc.
48 2.57.122.190 6 HIGH ssh bruteforce Romania Unmanaged Ltd
49 104.21.22.126 5 HIGH malware c2 Cloudflare, Inc.
50 45.148.10.183 5 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited

About This Data

This ranking is compiled from abuse reports submitted by a network of verified threat reporters, automated monitoring systems, and threat intelligence feeds including curated blocklists, community abuse databases, and malware trackers. IP addresses that appear on this list have been independently verified by multiple sources. The data updates in real-time and reflects the most actively malicious IP addresses targeting internet infrastructure worldwide.

Use the WAYSCloud API to check any IP address programmatically, or search directly using the threat intelligence dashboard.

Latest Cyber Attacks → ASN Threat Ranking → Country Risk Trends → Country Threat Ranking → Live Threat Map → AI Threat Forecast →