Top Malicious IP Addresses — Last 24 Hours

These are the 50 most frequently reported IP addresses in the last 24 hours, ranked by the number of independent abuse reports received from our threat intelligence network. Each IP has been flagged by automated threat detection systems and verified reporters.

24 Hours 7 Days 30 Days
# IP Address Reports Severity Categories Country Network
1 196.244.192.202 112 MEDIUM tcp scan Finland Orion Network Limited
2 68.209.56.42 107 MEDIUM tcp scan The Netherlands B2 Net Solutions Inc.
3 45.148.10.230 89 MEDIUM tcp scan The Netherlands Techoff Srv Limited
4 142.93.136.140 67 MEDIUM tcp scan The Netherlands DigitalOcean, LLC
5 93.123.109.6 57 MEDIUM tcp scan Bulgaria Techoff Srv Limited
6 213.209.159.25 56 MEDIUM tcp scan Germany Feo Prest SRL
7 62.60.130.219 51 MEDIUM tcp scan Iran Cipher Operations Doo Beograd - Novi Beograd
8 193.187.110.214 50 MEDIUM tcp scan Türkiye FAST ZONE IT
9 62.60.130.148 46 MEDIUM tcp scan Iran Cipher Operations Doo Beograd - Novi Beograd
10 213.209.159.26 44 MEDIUM tcp scan Germany Feo Prest SRL
11 178.20.210.151 37 MEDIUM tcp scan Germany Shereverov Marat Ahmedovich
12 94.154.43.70 35 MEDIUM tcp scan The Netherlands Storm Industries LLC
13 34.62.74.67 33 MEDIUM tcp scan Belgium Google LLC
14 35.205.97.229 28 MEDIUM tcp scan Belgium Google LLC
15 156.225.1.10 27 MEDIUM tcp scan Hong Kong AGOTOZ PTE. LTD.
16 103.253.245.102 27 HIGH high threat Indonesia PT Dewa Bisnis Digital
17 103.203.59.9 27 MEDIUM tcp scan China Beijing Tiantexin Tech. Co., Ltd.
18 158.23.176.177 27 HIGH high threat Mexico Microsoft Corporation
19 69.49.246.176 26 CRITICAL high threat United States Network Solutions, LLC
20 76.79.213.70 26 HIGH high threat United States Charter Communications Inc
21 103.68.11.235 26 CRITICAL high threat India Teleglobal Communications Pvt Ltd
22 141.95.162.162 26 HIGH high threat France OVH SAS
23 162.241.29.37 26 CRITICAL high threat United States Network Solutions, LLC
24 69.6.222.101 26 CRITICAL high threat Brazil Oracle Corporation
25 45.78.224.87 26 CRITICAL high threat Singapore Byteplus Pte. Ltd.
26 125.77.73.145 26 HIGH high threat China Chinanet
27 121.184.144.232 26 HIGH high threat South Korea Korea Telecom
28 211.253.9.49 26 HIGH high threat South Korea Korea Telecom
29 104.248.132.98 26 HIGH high threat Germany DigitalOcean, LLC
30 175.125.94.182 26 HIGH high threat South Korea SK Broadband Co Ltd
31 191.96.196.91 26 CRITICAL high threat United States PureVoltage Hosting Inc.
32 123.31.31.125 26 HIGH high threat Vietnam VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
33 220.126.8.143 26 HIGH high threat South Korea Korea Telecom
34 43.153.119.168 26 HIGH high threat United States Tencent Building, Kejizhongyi Avenue
35 20.92.77.159 26 HIGH high threat Australia Microsoft Corporation
36 89.218.69.66 26 HIGH high threat Kazakhstan JSC Kazakhtelecom
37 160.251.202.248 26 HIGH high threat Japan GMO Internet, Inc.
38 85.217.149.71 26 HIGH high threat Canada Modat B.V.
39 147.90.234.14 26 HIGH high threat United States Fourplex Telecom LLC
40 45.17.39.120 26 HIGH high threat United States AT&T Enterprises, LLC
41 129.121.101.56 26 HIGH high threat United States Oracle Corporation
42 118.70.182.193 26 HIGH high threat Vietnam FPT Telecom Company
43 83.48.125.229 26 HIGH high threat Spain Telefonica De Espana S.a.u.
44 182.69.183.149 26 HIGH high threat India Bharti Airtel Ltd., Telemedia Services
45 101.47.8.113 26 HIGH high threat Singapore Byteplus Pte. Ltd.
46 137.74.114.131 26 HIGH high threat France OVH SAS
47 41.204.63.118 26 HIGH high threat Ghana Ghana Telecommunications Company Limited
48 85.217.149.34 26 HIGH high threat Canada Modat B.V.
49 2.57.122.150 26 HIGH high threat Romania Unmanaged Ltd
50 195.239.97.254 26 HIGH high threat Russia PVimpelCom

About This Data

This ranking is compiled from abuse reports submitted by a network of verified threat reporters, automated monitoring systems, and threat intelligence feeds including curated blocklists, community abuse databases, and malware trackers. IP addresses that appear on this list have been independently verified by multiple sources. The data updates in real-time and reflects the most actively malicious IP addresses targeting internet infrastructure worldwide.

Use the WAYSCloud API to check any IP address programmatically, or search directly using the threat intelligence dashboard.

Latest Cyber Attacks → ASN Threat Ranking → Country Risk Trends → Country Threat Ranking → Live Threat Map → AI Threat Forecast →