Is 159.223.138.225 malicious?

IP reputation report for 159.223.138.225: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.

159.223.138.225 is listed on 6 threat intelligence sources

Detected by 6 threat intelligence sources in the isMalicious dataset — review before trusting this IP.

Threat verdict

VerdictListed on blocklists

Appears on threat intelligence blocklists — treat with caution.

Blocklist detections6 sources
Categoriessuspicious, attack, malware
Confidence score70/100

Aggregated confidence across the sources reporting this indicator.

First seen2026-07-25
Last updated2026-07-25

Detections

  • IPsum Level 1suspicious
  • SMTP Greetattack
  • IPsum - Malicious IPsmalware
  • FireHOL - Firehol Level4attack
  • DigitalOcean - RFC8805 Geofeedinfrastructure
  • X4BNet - Datacenter IPv4 Rangesrisk

Threat categories

suspiciousattackmalware

Related malicious IPs on nearby networks

159.223.138.47159.223.138.188159.223.82.116159.223.225.40159.223.217.139159.223.237.198159.223.1.61159.223.48.241
Run a live scan of 159.223.138.225Download IP blocklists →
Is 159.223.138.225 malicious? IP reputation & threat report | isMalicious