Top Malicious IP Addresses — Last 24 Hours

These are the 50 most frequently reported IP addresses in the last 24 hours, ranked by the number of independent abuse reports received from our threat intelligence network. Each IP has been flagged by automated threat detection systems and verified reporters.

24 Hours 7 Days 30 Days
# IP Address Reports Severity Categories Country Network
1 196.244.192.202 111 MEDIUM tcp scan Finland Orion Network Limited
2 68.209.56.42 108 MEDIUM tcp scan The Netherlands B2 Net Solutions Inc.
3 45.148.10.230 90 MEDIUM tcp scan The Netherlands Techoff Srv Limited
4 142.93.136.140 65 MEDIUM tcp scan The Netherlands DigitalOcean, LLC
5 93.123.109.6 57 MEDIUM tcp scan Bulgaria Techoff Srv Limited
6 213.209.159.25 56 MEDIUM tcp scan Germany Feo Prest SRL
7 62.60.130.219 52 MEDIUM tcp scan Iran Cipher Operations Doo Beograd - Novi Beograd
8 193.187.110.214 46 MEDIUM tcp scan Türkiye FAST ZONE IT
9 62.60.130.148 46 MEDIUM tcp scan Iran Cipher Operations Doo Beograd - Novi Beograd
10 213.209.159.26 38 MEDIUM tcp scan Germany Feo Prest SRL
11 178.20.210.151 36 MEDIUM tcp scan Germany Shereverov Marat Ahmedovich
12 34.62.74.67 33 MEDIUM tcp scan Belgium Google LLC
13 35.205.97.229 30 MEDIUM tcp scan Belgium Google LLC
14 156.225.1.10 28 MEDIUM tcp scan Hong Kong AGOTOZ PTE. LTD.
15 77.239.124.130 28 MEDIUM tcp scan United States Banatsync Srl
16 93.94.51.185 27 HIGH high threat Germany Global Connectivity Solutions Llp
17 2.57.122.53 27 MEDIUM tcp scan Romania Unmanaged Ltd
18 94.154.43.70 27 MEDIUM tcp scan The Netherlands Storm Industries LLC
19 103.253.245.102 27 HIGH high threat Indonesia PT Dewa Bisnis Digital
20 182.69.183.149 27 HIGH high threat India Bharti Airtel Ltd., Telemedia Services
21 136.175.82.197 26 HIGH high threat Bulgaria 2e Telekomunikasyon Ltd Sti
22 77.87.40.114 26 HIGH high threat Ukraine Zubko Volodymyr Viktorovych
23 20.219.14.152 26 HIGH high threat India Microsoft Corporation
24 138.197.195.44 26 HIGH high threat United States DigitalOcean, LLC
25 95.188.91.101 26 CRITICAL high threat Russia Rostelecom
26 217.165.222.190 26 MEDIUM high threat United Arab Emirates Emirates Telecommunications Group Company (etisalat Group) Pjsc
27 59.126.224.134 26 HIGH high threat Taiwan Data Communication Business Group
28 20.92.77.159 26 HIGH high threat Australia Microsoft Corporation
29 152.32.220.188 26 HIGH high threat Singapore UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
30 175.201.85.209 26 HIGH high threat South Korea Korea Telecom
31 196.189.155.89 26 HIGH high threat Ethiopia Ethio Telecom
32 221.228.203.3 26 HIGH high threat China Jiangsu Wuxi International IDC network
33 165.154.254.21 26 HIGH high threat United States Scloud Pte Ltd
34 2.188.206.146 26 CRITICAL high threat Iran Respina Networks & Beyond PJSC
35 166.62.41.13 26 HIGH high threat United States GoDaddy.com, LLC
36 141.95.162.162 26 HIGH high threat France OVH SAS
37 20.235.128.111 26 HIGH high threat India Microsoft Corporation
38 191.251.9.23 26 HIGH high threat Brazil TELEFONICA BRASIL S.A
39 101.47.14.46 26 HIGH high threat Singapore Byteplus Pte. Ltd.
40 195.86.192.66 26 HIGH high threat Malaysia OCTOPUS WEB SOLUTION INC
41 197.199.224.52 26 HIGH high threat Egypt ETISALAT MISR
42 61.29.254.109 26 HIGH high threat Singapore China Telecom Global Limited
43 104.129.54.73 26 HIGH high threat United States HostPapa
44 64.225.72.42 26 HIGH high threat The Netherlands DigitalOcean, LLC
45 179.51.153.37 26 HIGH high threat Brazil EUNAPOLIS TELECOM LTDA
46 103.104.112.8 26 HIGH high threat India Webstar Broadband Private Limited
47 103.248.120.6 26 CRITICAL high threat India Precious netcom pvt ltd
48 165.154.255.63 26 HIGH high threat United States Scloud Pte Ltd
49 94.184.10.185 26 MEDIUM high threat Iran Tejarat Electronic Nojhan Pardazesh LLC
50 43.173.33.166 26 HIGH high threat Indonesia Tencent Building, Kejizhongyi Avenue

About This Data

This ranking is compiled from abuse reports submitted by a network of verified threat reporters, automated monitoring systems, and threat intelligence feeds including curated blocklists, community abuse databases, and malware trackers. IP addresses that appear on this list have been independently verified by multiple sources. The data updates in real-time and reflects the most actively malicious IP addresses targeting internet infrastructure worldwide.

Use the WAYSCloud API to check any IP address programmatically, or search directly using the threat intelligence dashboard.

Latest Cyber Attacks → ASN Threat Ranking → Country Risk Trends → Country Threat Ranking → Live Threat Map → AI Threat Forecast →