This IP address has been reported a total of
26
times from
25 distinct
sources.
159.89.195.238 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 5555)
Source port: 64551
TTL: 53
Packet length: 64
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 5555)
Source port: 64551
TTL: 53
Packet length: 64
TOS: 0x00
This report (for 159.89.195.238) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-09T17:06:59.72 ...
show morePort scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-09T17:06:59.729609+00:00 XRM-01 kernel: [334256.550117] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=159.89.195.238 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=29680 DF PROTO=TCP SPT=58380 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Anonymous
37599/tcp,27819/tcp,28256/tcp,28085/tcp,40872/tcp,33940/tcp,28839/tcp,29643/tcp,29930/tcp,40127/tcp, ...
show more37599/tcp,27819/tcp,28256/tcp,28085/tcp,40872/tcp,33940/tcp,28839/tcp,29643/tcp,29930/tcp,40127/tcp,36326/tcp,42776/tcp,41559/tcp,25056/tcp,26068/tcp,41994/tcp,36562/tcp,35510/tcp,35100/tcp,36359/tcp,25651/tcp,33785/tcp,39175/tcp,32463/tcp,31237/tcp,29482/tcp,40761/tcp (1932 or more attempts)
show less
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10 ...
show more[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10m window.
Origin: SG / AS14061 DigitalOcean, LLC
Active: 08:26:55 UTC
Volume: 1 HTTP req
Probed: /squid-internal-mgr/cachemgr.cgi
Status mix: 444×1
Vhost fishing: 67.217.240.72
UA: "Mozilla/5.0 zgrab/0.x"
Auto-banned 30d. zorvexus-banner.
show less