Is 139.196.9.189 malicious?

IP reputation report for 139.196.9.189: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.

139.196.9.189 is listed on 11 threat intelligence sources

Detected by 11 threat intelligence sources in the isMalicious dataset — review before trusting this IP.

Threat verdict

VerdictListed on blocklists

Appears on threat intelligence blocklists — treat with caution.

Blocklist detections11 sources

Categoriesattack, phishing, suspicious, bruteforce, malware

Confidence score100/100

Aggregated confidence across the sources reporting this indicator.

First seen2026-03-29

Last updated2026-03-29

Detections

FireHOL - Firehol Level2attack
FireHOL - Greensnowattack
Romain Marcoux - Malicious IPsphishing
Greensnow - Attacks Multi-protocolsphishing
IPsum Level 1suspicious
SSH Password Authbruteforce
IPsum – malicious IP feedmalware
ThreatHive - Hive Blocklist
T145 - Black Mirror IPv4 Blocklistmalware
Bitwire - Inbound Blocklistmalware
IPsum Level 2suspicious

Threat categories

attack phishing suspicious malware

Related malicious IPs on nearby networks

139.196.9.98 139.196.124.69 139.196.165.35 139.196.240.85 139.196.110.201 139.196.243.30 139.196.240.234 139.196.218.65

Run a live scan of 139.196.9.189 Download IP blocklists →