Top Malicious IP Addresses — Last 24 Hours

These are the 50 most frequently reported IP addresses in the last 24 hours, ranked by the number of independent abuse reports received from our threat intelligence network. Each IP has been flagged by automated threat detection systems and verified reporters.

24 Hours 7 Days 30 Days
# IP Address Reports Severity Categories Country Network
1 103.130.214.71 772 HIGH malware c2 Vietnam Vietnam Online Network Solution Joint Stock Compnay
2 103.130.214.71 50 HIGH botnet c2 Vietnam Vietnam Online Network Solution Joint Stock Compnay
3 176.120.22.13 35 MEDIUM ssh bruteforce Russia Proton66 OOO
4 80.66.66.70 32 MEDIUM ssh bruteforce Russia Soldatov Alexey Valerevich
5 195.178.110.30 30 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
6 2.57.122.177 24 MEDIUM ssh bruteforce Romania Unmanaged Ltd
7 213.209.159.159 20 HIGH ssh bruteforce Taiwan Feo Prest SRL
8 176.120.22.17 19 MEDIUM ssh bruteforce Russia Proton66 OOO
9 45.87.249.155 18 HIGH ssh bruteforce Seychelles Shereverov Marat Ahmedovich
10 92.118.39.62 14 MEDIUM ssh bruteforce United States Unmanaged Ltd
11 80.94.92.165 13 HIGH ssh bruteforce Romania Unmanaged Ltd
12 92.118.39.63 12 MEDIUM ssh bruteforce United States Unmanaged Ltd
13 45.148.10.240 10 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
14 45.148.10.141 9 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
15 216.245.140.191 9 HIGH botnet c2 United Kingdom Clouvider Limited
16 80.94.92.187 9 HIGH ssh bruteforce Romania Unmanaged Ltd
17 80.94.92.167 9 HIGH ssh bruteforce Romania Unmanaged Ltd
18 45.148.10.157 8 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
19 45.148.10.151 8 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
20 116.99.169.255 8 MEDIUM ssh bruteforce Vietnam Viettel Corporation
21 116.99.169.184 8 MEDIUM ssh bruteforce Vietnam Viettel Corporation
22 94.156.152.67 8 HIGH botnet c2 Bulgaria Internet Magnate (Pty) Ltd
23 2.57.122.192 8 HIGH ssh bruteforce Romania Unmanaged Ltd
24 2.57.122.238 7 MEDIUM ssh bruteforce Romania Unmanaged Ltd
25 45.148.10.152 7 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
26 2.57.121.86 7 HIGH ssh bruteforce Romania Unmanaged Ltd
27 2.57.122.190 7 HIGH ssh bruteforce Romania Unmanaged Ltd
28 2.57.122.194 7 HIGH ssh bruteforce Romania Unmanaged Ltd
29 2.57.121.17 7 MEDIUM ssh bruteforce Romania Unmanaged Ltd
30 2.57.122.199 7 HIGH ssh bruteforce Romania Unmanaged Ltd
31 2.57.122.188 7 HIGH ssh bruteforce Romania Unmanaged Ltd
32 45.148.10.147 6 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
33 176.120.22.47 6 MEDIUM ssh bruteforce Russia Proton66 OOO
34 2.57.122.191 6 HIGH ssh bruteforce Romania Unmanaged Ltd
35 80.94.92.177 6 HIGH ssh bruteforce Romania Unmanaged Ltd
36 92.118.39.56 6 MEDIUM ssh bruteforce United States Unmanaged Ltd
37 195.178.110.15 6 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
38 2.57.122.189 6 HIGH ssh bruteforce Romania Unmanaged Ltd
39 80.94.92.166 6 HIGH ssh bruteforce Romania Unmanaged Ltd
40 2.57.121.69 6 HIGH ssh bruteforce Romania Unmanaged Ltd
41 216.245.140.191 5 HIGH malware c2 United Kingdom Clouvider Limited
42 80.94.92.164 5 HIGH ssh bruteforce Romania Unmanaged Ltd
43 2.57.122.195 5 HIGH ssh bruteforce Romania Unmanaged Ltd
44 2.57.122.193 5 HIGH ssh bruteforce Romania Unmanaged Ltd
45 45.227.254.170 5 HIGH ssh bruteforce Panama Flyservers S.A.
46 2.57.121.118 5 HIGH ssh bruteforce Romania Unmanaged Ltd
47 20.203.42.204 5 MEDIUM ssh bruteforce United Arab Emirates Microsoft Corporation
48 2.57.122.196 5 HIGH ssh bruteforce Romania Unmanaged Ltd
49 92.118.39.76 5 MEDIUM ssh bruteforce United States Unmanaged Ltd
50 193.46.255.86 5 HIGH ssh bruteforce Romania Unmanaged Ltd

About This Data

This ranking is compiled from abuse reports submitted by a network of verified threat reporters, automated monitoring systems, and threat intelligence feeds including curated blocklists, community abuse databases, and malware trackers. IP addresses that appear on this list have been independently verified by multiple sources. The data updates in real-time and reflects the most actively malicious IP addresses targeting internet infrastructure worldwide.

Use the WAYSCloud API to check any IP address programmatically, or search directly using the threat intelligence dashboard.

Latest Cyber Attacks → ASN Threat Ranking → Country Risk Trends → Country Threat Ranking → Live Threat Map → AI Threat Forecast →