Platform All capabilities Keep threats out Seawall: Network Protection Fairway: Connectivity & Traffic Priority Lookout: Threat Intelligence Know and harden your estate Deckhand: Endpoint Protection Quartermaster: Asset & Software Inventory Radar: Vulnerability Management Stay in control Safe Harbor: Backup & Recovery Helm: Identity & Access Gangway: Secure Remote Access Respond and prove it Logbook: Investigation & Incident Response Muster: Training, Drills & Awareness Chandler: Supplier & Third-Party Risk Bridge: Central Command & Evidence Hardware & more Network appliances Order routers Portal showcase How it works Plans Compare plans Essentials Custom Complete Who it's for Maritime & offshore Industry & energy No IT team You have an IT team Services NIS2 & maritime compliance Penetration testing Threat intelligence Vulnerability reporter Free tools IP address lookup Vulnerability lookup Malware hash lookup Free malware scan User agent lookup Regulatory clock Report Report a suspicious event
Contact us
Free tools · IP reputation

IP reputation check

Check whether an IP address is known to be malicious, and browse the addresses our threat intelligence currently flags, newest first: the verdict, the score, how many public blocklists carry each one and when it was last listed.

Showing the 100 most recently listed of 23,201 addresses we publish a page for. Need the whole feed, live, as JSON? See API access.

Every IPv4 and IPv6 address has a page. The ones below are the addresses that have a verdict on them.

Recently listed malicious IP addresses

Address Verdict Score Feeds Last listed
50.16.16.211 Known malicious 98 5 2026-10-19
162.243.103.246 Known malicious 95 4 2026-10-19
178.62.3.223 Known malicious 95 4 2026-10-19
27.133.154.218 Known malicious 95 4 2026-10-19
34.204.119.63 Known malicious 95 4 2026-10-19
130.12.180.32 Known malicious 93 9 2026-10-19
35.187.231.181 Known malicious 93 6 2026-10-19
103.159.51.70 Known malicious 92 9 2026-10-19
107.150.123.48 Known malicious 92 9 2026-10-19
119.28.84.193 Known malicious 92 10 2026-10-19
130.12.182.223 Known malicious 92 9 2026-10-19
160.250.132.238 Known malicious 92 9 2026-10-19
165.154.218.226 Known malicious 92 9 2026-10-19
167.71.233.141 Known malicious 92 10 2026-10-19
185.231.33.82 Known malicious 92 9 2026-10-19
196.189.236.67 Known malicious 92 9 2026-10-19
2.57.122.238 Known malicious 92 10 2026-10-19
209.99.184.98 Known malicious 92 5 2026-10-19
24.46.242.125 Known malicious 92 8 2026-10-19
37.120.213.13 Known malicious 92 9 2026-10-19
50.221.56.52 Known malicious 92 9 2026-10-19
91.231.89.70 Known malicious 92 6 2026-10-19
91.92.43.221 Known malicious 92 6 2026-10-19
92.5.155.195 Known malicious 92 9 2026-10-19
101.33.78.144 Known malicious 91 6 2026-10-19
101.47.133.255 Known malicious 91 6 2026-10-19
101.96.195.253 Known malicious 91 8 2026-10-19
101.96.203.141 Known malicious 91 6 2026-10-19
102.219.208.90 Known malicious 91 5 2026-10-19
102.220.160.115 Known malicious 91 8 2026-10-19
102.220.160.124 Known malicious 91 9 2026-10-19
102.220.160.237 Known malicious 91 8 2026-10-19
102.220.160.42 Known malicious 91 6 2026-10-19
102.220.160.67 Known malicious 91 6 2026-10-19
102.220.161.119 Known malicious 91 8 2026-10-19
102.220.161.170 Known malicious 91 8 2026-10-19
102.220.161.173 Known malicious 91 8 2026-10-19
102.220.161.27 Known malicious 91 8 2026-10-19
102.220.161.28 Known malicious 91 7 2026-10-19
102.220.161.79 Known malicious 91 8 2026-10-19
102.220.161.85 Known malicious 91 7 2026-10-19
102.220.161.86 Known malicious 91 9 2026-10-19
102.220.173.146 Known malicious 91 7 2026-10-19
102.244.78.57 Known malicious 91 6 2026-10-19
103.100.234.155 Known malicious 91 5 2026-10-19
103.115.131.230 Known malicious 91 5 2026-10-19
103.154.63.62 Known malicious 91 8 2026-10-19
103.159.2.113 Known malicious 91 9 2026-10-19
103.160.5.123 Known malicious 91 8 2026-10-19
103.163.36.27 Known malicious 91 5 2026-10-19
103.170.215.118 Known malicious 91 8 2026-10-19
103.174.195.193 Known malicious 91 5 2026-10-19
103.182.10.220 Known malicious 91 6 2026-10-19
103.228.36.205 Known malicious 91 8 2026-10-19
103.90.67.3 Known malicious 91 8 2026-10-19
104.244.77.208 Known malicious 91 6 2026-10-19
104.28.161.35 Known malicious 91 5 2026-10-19
104.28.198.248 Known malicious 91 5 2026-10-19
104.28.201.73 Known malicious 91 6 2026-10-19
104.28.202.252 Known malicious 91 5 2026-10-19
104.28.218.136 Known malicious 91 5 2026-10-19
104.28.230.248 Known malicious 91 5 2026-10-19
104.28.234.252 Known malicious 91 5 2026-10-19
106.13.48.135 Known malicious 91 6 2026-10-19
110.10.176.164 Known malicious 91 7 2026-10-19
111.29.52.71 Known malicious 91 6 2026-10-19
113.249.111.67 Known malicious 91 5 2026-10-19
113.98.254.50 Known malicious 91 6 2026-10-19
115.190.235.8 Known malicious 91 8 2026-10-19
116.52.252.150 Known malicious 91 8 2026-10-19
117.2.125.84 Known malicious 91 8 2026-10-19
117.236.124.166 Known malicious 91 6 2026-10-19
120.48.0.142 Known malicious 91 7 2026-10-19
120.48.52.177 Known malicious 91 8 2026-10-19
120.48.90.166 Known malicious 91 9 2026-10-19
121.242.232.216 Known malicious 91 8 2026-10-19
122.187.230.66 Known malicious 91 7 2026-10-19
123.180.188.162 Known malicious 91 8 2026-10-19
128.14.232.142 Known malicious 91 8 2026-10-19
129.222.206.153 Known malicious 91 5 2026-10-19
13.92.156.31 Known malicious 91 8 2026-10-19
130.12.181.21 Known malicious 91 7 2026-10-19
130.12.181.23 Known malicious 91 8 2026-10-19
130.12.182.122 Known malicious 91 8 2026-10-19
130.12.182.144 Known malicious 91 8 2026-10-19
130.12.182.149 Known malicious 91 6 2026-10-19
130.12.182.224 Known malicious 91 9 2026-10-19
130.12.182.227 Known malicious 91 8 2026-10-19
130.12.182.230 Known malicious 91 7 2026-10-19
130.12.182.231 Known malicious 91 7 2026-10-19
130.12.182.93 Known malicious 91 8 2026-10-19
130.195.242.11 Known malicious 91 5 2026-10-19
135.136.20.2 Known malicious 91 5 2026-10-19
135.136.23.227 Known malicious 91 5 2026-10-19
136.87.104.232 Known malicious 91 5 2026-10-19
138.124.97.138 Known malicious 91 5 2026-10-19
138.219.120.37 Known malicious 91 5 2026-10-19
14.17.59.195 Known malicious 91 8 2026-10-19
143.244.54.26 Known malicious 91 5 2026-10-19
143.244.57.84 Known malicious 91 7 2026-10-19

A listing describes what an address has been seen doing, not who owns it today. Addresses change hands, and a shared host can be listed for one customer's traffic.

How the reputation verdict is made

An address gets a verdict when it has been seen doing harm: scanning networks, trying passwords, delivering malware or controlling infected machines. Our threat intelligence combines what our own sensors and appliances see with public blocklists, scores each address from 0 to 100 and gives it a severity. The address page shows the verdict, the score, how many public blocklists also carry it, and when it was last listed.

What to do with a flagged address

  • In a firewall or server log: block it, and check whether it reached anything (a successful login, a download) rather than only knocking.
  • In an email header: treat the message as suspicious, and do not open its links or attachments. You can check an attachment with the free malware scan.
  • One of your own addresses: a machine on your network may be infected or misused. Find which device used the address at the time listed and check it.

Clean is not the same as safe

No verdict means nobody has reported the address yet, not that it is trustworthy. To see who owns an address and which network it belongs to, use the IP address lookup.

This list is the sample, not the service

Our Threat Intelligence service returns real-time verdicts, fleet sightings and JSON for automation, and the same intelligence blocks traffic on every appliance we run.

Explore Threat Intelligence