Is 159.89.238.196 malicious?
IP reputation report for 159.89.238.196: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.
159.89.238.196 is flagged as malicious
Detected by 11 threat intelligence sources in the isMalicious dataset — review before trusting this IP.
Threat verdict
VerdictMalicious
Flagged malicious by the aggregated reputation verdict.
Blocklist detections11 sources
Suspicious signals2
Categoriesphishing, malware, suspicious
Confidence score100/100
Aggregated confidence across the sources reporting this indicator.
First seen2026-05-28
Last updated2026-05-28
Network & location
LocationNorth Bergen, New Jersey, United States
ISPDigitalOcean, LLC
Security posture
Open ports5000
Detections
- Romain Marcoux - Malicious IPsphishing
- Bitwire - Inbound Blocklistmalware
- CINSSCORE Bad Guysmalware
- Romain Marcoux - Malicious Outgoing IPsphishing
- IPsum Level 1suspicious
- IPsum – malicious IP feedmalware
- T145 - Black Mirror IPv4 Blocklistmalware
- Bitwire - Outbound Blocklistmalware
- bitwire‑it IP blocklist – bad IPs updated every 2hmalware
- X4BNet - Datacenter IPv4 Rangesrisk
- DigitalOcean - RFC8805 Geofeedinfrastructure