Top Malicious IP Addresses — Last 24 Hours

These are the 50 most frequently reported IP addresses in the last 24 hours, ranked by the number of independent abuse reports received from our threat intelligence network. Each IP has been flagged by automated threat detection systems and verified reporters.

24 Hours 7 Days 30 Days
# IP Address Reports Severity Categories Country Network
1 80.94.92.128 34 MEDIUM ssh bruteforce Romania Unmanaged Ltd
2 195.178.110.30 21 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
3 195.178.110.26 14 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
4 185.253.160.18 14 HIGH ssh bruteforce Armenia M247 Europe SRL
5 45.148.10.141 12 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
6 45.148.10.152 12 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
7 31.57.184.154 12 HIGH malware c2 United States VPS Dedicated LLC
8 45.148.10.147 12 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
9 45.148.10.151 12 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
10 209.200.246.194 9 HIGH malware c2 Canada Regxa Company for Information Technology Ltd
11 45.148.10.157 8 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
12 169.58.82.229 8 HIGH malware c2 France Contabo GmbH
13 193.24.211.204 8 MEDIUM ssh bruteforce Germany Data Campus Limited
14 172.94.18.103 8 HIGH malware c2 Germany M247 Europe SRL
15 80.94.92.128 8 MEDIUM generic bruteforce Romania Unmanaged Ltd
16 216.9.225.38 7 HIGH malware c2 United States Fiba Cloud Operation Company, LLC
17 157.20.182.18 7 HIGH malware c2 The Netherlands Hosterdaddy Private Limited
18 157.20.182.21 7 HIGH malware c2 The Netherlands Hosterdaddy Private Limited
19 54.38.94.225 6 HIGH malware c2 France OVH SAS
20 196.251.107.131 6 HIGH malware c2 Germany Femo It Solutions Limited
21 193.46.255.86 6 HIGH ssh bruteforce Romania Unmanaged Ltd
22 157.20.182.17 6 HIGH malware c2 The Netherlands Hosterdaddy Private Limited
23 36.140.162.173 6 HIGH malware c2 China China Mobile Communications Group Co., Ltd.
24 185.115.164.59 6 HIGH malware c2 Philippines Sunbridge worldwide LTD
25 143.198.206.191 6 HIGH malware c2 Singapore DigitalOcean, LLC
26 80.94.92.179 6 MEDIUM ssh bruteforce Romania Unmanaged Ltd
27 103.11.41.10 6 HIGH malware c2 Philippines Sunbridge worldwide LTD
28 104.243.248.63 6 HIGH malware c2 Germany Voxility LLP
29 155.103.69.30 6 HIGH malware c2 Türkiye Fiba Cloud Operation Company, LLC
30 167.172.71.69 6 HIGH malware c2 Singapore DigitalOcean, LLC
31 37.72.172.58 6 HIGH malware c2 United States HIVELOCITY, Inc.
32 195.178.110.217 5 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
33 94.183.177.21 5 MEDIUM ssh bruteforce The Netherlands Cgi Global Limited
34 77.90.185.20 5 MEDIUM ssh bruteforce Iran Limited Network LTD
35 195.178.110.137 5 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
36 116.110.155.22 5 MEDIUM ssh bruteforce Vietnam Viettel Corporation
37 27.102.137.139 5 HIGH malware c2 South Korea DAOU TECHNOLOGY
38 85.206.168.238 5 HIGH malware c2 Lithuania UAB Bacloud
39 82.165.79.60 5 HIGH malware c2 Germany IONOS SE
40 102.204.223.230 5 HIGH malware c2 Nigeria ABCCLOUD SDN.BHD.
41 185.115.164.60 5 HIGH malware c2 Philippines Sunbridge worldwide LTD
42 117.72.39.83 5 HIGH malware c2 China China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch
43 116.99.175.133 5 MEDIUM ssh bruteforce Vietnam Viettel Corporation
44 60.247.206.23 5 HIGH malware c2 China CHINANET SiChuan Telecom Internet Data Center
45 203.98.68.17 5 HIGH malware c2 United Kingdom HosterDaddy Private Limited
46 147.93.191.75 5 HIGH malware c2 United States Contabo Inc.
47 89.42.134.220 5 HIGH malware c2 Italy NetJoin srl
48 116.110.146.157 5 MEDIUM ssh bruteforce Vietnam Viettel Corporation
49 157.20.182.22 5 HIGH malware c2 The Netherlands Hosterdaddy Private Limited
50 206.189.81.41 5 HIGH malware c2 Singapore DigitalOcean, LLC

About This Data

This ranking is compiled from abuse reports submitted by a network of verified threat reporters, automated monitoring systems, and threat intelligence feeds including curated blocklists, community abuse databases, and malware trackers. IP addresses that appear on this list have been independently verified by multiple sources. The data updates in real-time and reflects the most actively malicious IP addresses targeting internet infrastructure worldwide.

Use the WAYSCloud API to check any IP address programmatically, or search directly using the threat intelligence dashboard.

Latest Cyber Attacks → ASN Threat Ranking → Country Risk Trends → Country Threat Ranking → Live Threat Map → AI Threat Forecast →