Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
117.89.89.25 has a threat confidence score of 55%. This IP address from China (AS134756, CHINANET Nanjing Jishan IDC network) has been observed in 8 honeypot sessions targeting SSH protocols. First observed on April 14, 2026, most recently active April 16, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.