IP reputation

Is 189.203.237.28 malicious?

IP reputation report for 189.203.237.28: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.

Run a live scan of 189.203.237.28Download IP blocklists

189.203.237.28 is listed on 10 threat intelligence sources

Detected by 10 threat intelligence sources in the isMalicious dataset — review before trusting this IP.

Threat verdict

VerdictListed on blocklists

Appears on threat intelligence blocklists — treat with caution.

Blocklist detections10 sources
Categoriesmalware, attack, phishing, suspicious, c2
Confidence score100/100

Aggregated confidence across the sources reporting this indicator.

First seen2026-08-15
Last updated2026-08-16

Detections

  • FireHOL - Ciarmymalware
  • FireHOL - Firehol Level3attack
  • Romain Marcoux - Malicious IPsphishing
  • CINSSCORE Bad Guysmalware
  • IPsum Level 1suspicious
  • ThreatHive - Hive Blocklist
  • Bitwire - Inbound Blocklistmalware
  • IPsum - Malicious IPsmalware
  • Romain Marcoux - Malicious Outgoing IPsphishing
  • Bitwire - Outbound Blocklistmalware

Threat categories

malwareattackphishingsuspiciousc2

Related malicious IPs on nearby networks

189.203.29.127189.203.193.153189.203.97.234189.203.45.105189.203.96.241189.203.149.176189.203.231.80189.203.88.133

All indexed IP addresses

Is 189.203.237.28 malicious? IP reputation & threat report | isMalicious