Is 196.196.254.218 malicious?

IP reputation report for 196.196.254.218: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.

196.196.254.218 is listed on 27 threat intelligence sources

Detected by 27 threat intelligence sources in the isMalicious dataset — review before trusting this IP.

Threat verdict

VerdictListed on blocklists

Appears on threat intelligence blocklists — treat with caution.

Blocklist detections27 sources

Categoriesabuse, attack, phishing, suspicious, malware

Confidence score100/100

Aggregated confidence across the sources reporting this indicator.

First seen2026-06-15

Last updated2026-06-15

Detections

FireHOL - Botscout 1dabuse
FireHOL - Botscout 7dabuse
FireHOL - Botscout 30dabuse
FireHOL - Firehol Abusers 1dabuse
FireHOL - Firehol Abusers 30dabuse
FireHOL - Firehol Level4attack
FireHOL - Stopforumspamabuse
FireHOL - Stopforumspam 30dabuse
FireHOL - Stopforumspam 180dabuse
FireHOL - Stopforumspam 7dabuse
FireHOL - Stopforumspam 90dabuse
FireHOL - Stopforumspam 365dabuse
Romain Marcoux - Malicious IPsphishing
IPsum Level 1suspicious
IPsum – malicious IP feedmalware
ThreatHive - Hive Blocklist
Sefinek - Malicious IP Addressesmalware
T145 - Black Mirror IPv4 Blocklistmalware
Bitwire - Inbound Blocklistmalware
IPsum Level 2suspicious
bitwire‑it IP blocklist – bad IPs updated every 2hmalware
IPsum - Malicious IPsmalware
FireHOL - Botscoutabuse
FireHOL - Sblamabuse

+3 more sources in the full report.

Threat categories

abuse attack phishing suspicious malware

Related malicious IPs on nearby networks

196.196.254.53 196.196.216.0 196.196.169.67 196.196.169.189 196.196.156.2 196.196.23.16 196.196.224.182 196.196.222.137

Run a live scan of 196.196.254.218 Download IP blocklists →