Top Malicious IP Addresses — Last 24 Hours

These are the 50 most frequently reported IP addresses in the last 24 hours, ranked by the number of independent abuse reports received from our threat intelligence network. Each IP has been flagged by automated threat detection systems and verified reporters.

24 Hours 7 Days 30 Days
# IP Address Reports Severity Categories Country Network
1 103.130.214.71 772 HIGH malware c2 Vietnam Vietnam Online Network Solution Joint Stock Compnay
2 103.130.214.71 50 HIGH botnet c2 Vietnam Vietnam Online Network Solution Joint Stock Compnay
3 176.120.22.13 33 MEDIUM ssh bruteforce Russia Proton66 OOO
4 80.66.66.70 33 MEDIUM ssh bruteforce Russia Soldatov Alexey Valerevich
5 195.178.110.30 29 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
6 2.57.122.177 25 MEDIUM ssh bruteforce Romania Unmanaged Ltd
7 213.209.159.159 20 HIGH ssh bruteforce Taiwan Feo Prest SRL
8 45.87.249.155 19 HIGH ssh bruteforce Seychelles Shereverov Marat Ahmedovich
9 176.120.22.17 17 MEDIUM ssh bruteforce Russia Proton66 OOO
10 92.118.39.62 16 MEDIUM ssh bruteforce United States Unmanaged Ltd
11 80.94.92.165 14 HIGH ssh bruteforce Romania Unmanaged Ltd
12 92.118.39.63 13 MEDIUM ssh bruteforce United States Unmanaged Ltd
13 80.94.92.167 9 HIGH ssh bruteforce Romania Unmanaged Ltd
14 45.148.10.240 9 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
15 45.148.10.141 9 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
16 94.156.152.67 8 HIGH botnet c2 Bulgaria Internet Magnate (Pty) Ltd
17 116.99.169.184 8 MEDIUM ssh bruteforce Vietnam Viettel Corporation
18 45.148.10.151 8 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
19 116.99.169.255 8 MEDIUM ssh bruteforce Vietnam Viettel Corporation
20 80.94.92.187 8 HIGH ssh bruteforce Romania Unmanaged Ltd
21 45.148.10.157 8 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
22 2.57.122.192 8 HIGH ssh bruteforce Romania Unmanaged Ltd
23 2.57.122.199 7 HIGH ssh bruteforce Romania Unmanaged Ltd
24 2.57.122.190 7 HIGH ssh bruteforce Romania Unmanaged Ltd
25 2.57.122.188 7 HIGH ssh bruteforce Romania Unmanaged Ltd
26 45.148.10.152 7 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
27 2.57.122.96 7 MEDIUM ssh bruteforce Romania Unmanaged Ltd
28 2.57.121.86 7 HIGH ssh bruteforce Romania Unmanaged Ltd
29 2.57.121.17 7 MEDIUM ssh bruteforce Romania Unmanaged Ltd
30 2.57.122.194 7 HIGH ssh bruteforce Romania Unmanaged Ltd
31 92.118.39.56 6 MEDIUM ssh bruteforce United States Unmanaged Ltd
32 195.178.110.15 6 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
33 2.57.121.50 6 MEDIUM ssh bruteforce Romania Unmanaged Ltd
34 80.94.92.164 6 HIGH ssh bruteforce Romania Unmanaged Ltd
35 45.148.10.147 6 HIGH ssh bruteforce The Netherlands Techoff Srv Limited
36 2.57.122.189 6 HIGH ssh bruteforce Romania Unmanaged Ltd
37 80.94.92.166 6 HIGH ssh bruteforce Romania Unmanaged Ltd
38 176.120.22.47 6 MEDIUM ssh bruteforce Russia Proton66 OOO
39 2.57.122.238 6 MEDIUM ssh bruteforce Romania Unmanaged Ltd
40 80.94.92.177 6 HIGH ssh bruteforce Romania Unmanaged Ltd
41 193.46.255.86 6 HIGH ssh bruteforce Romania Unmanaged Ltd
42 2.57.121.69 6 HIGH ssh bruteforce Romania Unmanaged Ltd
43 2.57.122.191 6 HIGH ssh bruteforce Romania Unmanaged Ltd
44 2.57.122.193 5 HIGH ssh bruteforce Romania Unmanaged Ltd
45 92.118.39.76 5 MEDIUM ssh bruteforce United States Unmanaged Ltd
46 45.227.254.170 5 HIGH ssh bruteforce Panama Flyservers S.A.
47 2.57.121.118 5 HIGH ssh bruteforce Romania Unmanaged Ltd
48 2.57.122.196 5 HIGH ssh bruteforce Romania Unmanaged Ltd
49 2.57.122.195 5 HIGH ssh bruteforce Romania Unmanaged Ltd
50 80.94.92.183 5 MEDIUM ssh bruteforce Romania Unmanaged Ltd

About This Data

This ranking is compiled from abuse reports submitted by a network of verified threat reporters, automated monitoring systems, and threat intelligence feeds including curated blocklists, community abuse databases, and malware trackers. IP addresses that appear on this list have been independently verified by multiple sources. The data updates in real-time and reflects the most actively malicious IP addresses targeting internet infrastructure worldwide.

Use the WAYSCloud API to check any IP address programmatically, or search directly using the threat intelligence dashboard.

Latest Cyber Attacks → ASN Threat Ranking → Country Risk Trends → Country Threat Ranking → Live Threat Map → AI Threat Forecast →