Is 5.226.140.23 malicious?
IP reputation report for 5.226.140.23: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.
5.226.140.23 is flagged as malicious
Detected by 30 threat intelligence sources in the isMalicious dataset — review before trusting this IP.
Threat verdict
VerdictMalicious
Flagged malicious by the aggregated reputation verdict.
Blocklist detections30 sources
Suspicious signals3
Categoriesphishing, malware, suspicious, abuse, botnet, attack, dns
Confidence score100/100
Aggregated confidence across the sources reporting this indicator.
First seen2026-06-02
Last updated2026-06-02
Network & location
LocationCity of London, England, United Kingdom
ISPHydra Communications Ltd
Detections
- Duggytuxy - Blacklist Ips For Fortinet Firewall Aa.txt
- Romain Marcoux - Malicious IPsphishing
- CINSSCORE Bad Guysmalware
- T145 - Black Mirror IPv4 Blocklistmalware
- Data-Shield IPv4 Blocklistmalware
- Romain Marcoux - Malicious Outgoing IPsphishing
- IPsum Level 2suspicious
- IPsum – malicious IP feedmalware
- ThreatHive - Hive Blocklist
- Borestad - AbuseIPDB Blocklist (1d)abuse
- IPsum Level 1suspicious
- Opendbl Net - Ipsum.listmalware
- IPsum Level 3suspicious
- Malware-Filter - Botnet Filter IPsbotnet
- Malware-Filter - Botnet Filterbotnet
- IPsum Level 4suspicious
- SIP Queryattack
- Borestad - AbuseIPDB Blocklist (30d)abuse
- AbuseIPDB - IP Blacklistabuse
- SMTP Greetattack
- IPsum - Malicious IPsmalware
- Binary Defense - Banlist
- DNS Recursion Desireddns
- FireHOL - Ciarmymalware
+6 more sources in the full report.