Top Malicious IP Addresses — Last 7 Days

These are the 50 most frequently reported IP addresses over the past week, ranked by the number of independent abuse reports received from our threat intelligence network. Each IP has been flagged by automated threat detection systems and verified reporters.

24 Hours 7 Days 30 Days
Note: The 7d view is currently in beta. For the most accurate and fastest results, use the 24-hour view which is powered by a dedicated materialized view refreshed every 5 minutes.
# IP Address Reports Severity Categories Country Network
1 103.130.214.71 822 HIGH botnet c2,malware c2 Vietnam Vietnam Online Network Solution Joint Stock Compnay
2 176.120.22.13 235 MEDIUM ssh-bruteforce,ssh bruteforce Russia Proton66 OOO
3 195.178.110.30 201 MEDIUM ssh-bruteforce,ssh bruteforce Bulgaria Techoff Srv Limited
4 176.120.22.17 162 MEDIUM ssh-bruteforce,ssh bruteforce Russia Proton66 OOO
5 2.57.122.177 157 MEDIUM ssh-bruteforce,ssh bruteforce Romania Unmanaged Ltd
6 45.87.249.155 130 HIGH ssh bruteforce,voip attack Seychelles Shereverov Marat Ahmedovich
7 92.118.39.63 121 MEDIUM ssh-bruteforce,ssh bruteforce United States Unmanaged Ltd
8 80.66.66.70 116 MEDIUM ssh-bruteforce,ssh bruteforce Russia Soldatov Alexey Valerevich
9 2.57.121.112 115 MEDIUM ssh bruteforce Romania Unmanaged Ltd
10 2.57.121.25 114 MEDIUM ssh bruteforce Romania Unmanaged Ltd
11 87.251.64.141 111 MEDIUM attacks,brute force,ssh-bruteforce,ssh brute force,ssh bruteforce,web attack,web brute force United States ISAEV Igor
12 213.209.159.159 111 MEDIUM ssh bruteforce Taiwan Feo Prest SRL
13 31.57.216.15 110 HIGH ssh bruteforce United Arab Emirates Netiface LLC
14 45.148.10.240 100 MEDIUM ssh-bruteforce,ssh bruteforce The Netherlands Techoff Srv Limited
15 80.94.92.165 90 HIGH ssh bruteforce Romania Unmanaged Ltd
16 92.118.39.62 79 MEDIUM ssh bruteforce United States Unmanaged Ltd
17 140.82.121.3 73 HIGH malware c2 Germany GitHub, Inc.
18 140.82.121.4 73 HIGH malware c2 Germany GitHub, Inc.
19 185.199.109.133 72 HIGH malware c2 United States Fastly, Inc.
20 185.199.110.133 72 HIGH malware c2 United States Fastly, Inc.
21 185.199.111.133 72 HIGH malware c2 United States Fastly, Inc.
22 45.148.10.141 72 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
23 45.148.10.152 68 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
24 195.178.110.15 68 MEDIUM ssh bruteforce Bulgaria Techoff Srv Limited
25 45.148.10.147 67 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
26 45.148.10.157 67 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
27 2.57.122.194 67 MEDIUM ssh bruteforce Romania Unmanaged Ltd
28 2.57.122.189 66 MEDIUM ssh bruteforce Romania Unmanaged Ltd
29 2.57.122.195 64 MEDIUM ssh bruteforce Romania Unmanaged Ltd
30 45.148.10.151 64 MEDIUM ssh bruteforce The Netherlands Techoff Srv Limited
31 2.57.122.188 64 MEDIUM ssh bruteforce Romania Unmanaged Ltd
32 2.57.121.118 64 MEDIUM persistent attacker,ssh bruteforce Romania Unmanaged Ltd
33 2.57.122.199 63 MEDIUM persistent attacker,ssh bruteforce Romania Unmanaged Ltd
34 2.57.122.192 62 MEDIUM ssh bruteforce Romania Unmanaged Ltd
35 2.57.122.190 62 MEDIUM ssh bruteforce Romania Unmanaged Ltd
36 2.57.121.86 61 MEDIUM ssh bruteforce Romania Unmanaged Ltd
37 45.227.254.170 60 MEDIUM persistent attacker,ssh bruteforce Panama Flyservers S.A.
38 2.57.122.196 59 MEDIUM ssh bruteforce Romania Unmanaged Ltd
39 2.57.122.197 58 MEDIUM persistent attacker,ssh bruteforce Romania Unmanaged Ltd
40 2.57.122.191 58 MEDIUM ssh bruteforce Romania Unmanaged Ltd
41 2.57.121.69 58 MEDIUM ssh bruteforce Romania Unmanaged Ltd
42 2.57.121.17 58 MEDIUM ssh bruteforce Romania Unmanaged Ltd
43 87.121.84.19 58 HIGH botnet c2,malware c2 United States Vpsvault.host Ltd
44 80.94.92.167 58 HIGH ssh bruteforce Romania Unmanaged Ltd
45 2.57.122.193 56 MEDIUM ssh bruteforce Romania Unmanaged Ltd
46 2.57.121.50 55 MEDIUM persistent attacker,ssh bruteforce Romania Unmanaged Ltd
47 80.94.92.187 55 HIGH ssh bruteforce Romania Unmanaged Ltd
48 91.224.92.50 55 HIGH ssh bruteforce,web attack,web brute force United Kingdom UAB Host Baltic
49 2.57.122.96 51 MEDIUM ssh bruteforce Romania Unmanaged Ltd
50 182.160.117.73 49 MEDIUM rdp bruteforce Bangladesh aamra networks limited

About This Data

This ranking is compiled from abuse reports submitted by a network of verified threat reporters, automated monitoring systems, and threat intelligence feeds including curated blocklists, community abuse databases, and malware trackers. IP addresses that appear on this list have been independently verified by multiple sources. The data updates in real-time and reflects the most actively malicious IP addresses targeting internet infrastructure worldwide.

Use the WAYSCloud API to check any IP address programmatically, or search directly using the threat intelligence dashboard.

Latest Cyber Attacks → ASN Threat Ranking → Country Risk Trends → Country Threat Ranking → Live Threat Map → AI Threat Forecast →