Check an IP Address, Domain Name, Subnet, or ASN

152.89.61.139 was found in our database!

$ whois 152.89.61.139

country·🇺🇦 Ukraine

city·Kyiv

isp·Virtual Systems LLC

asn·AS30860

network·Standard

$ sikker risk 152.89.61.139scoring →

confidence

85%Very High

first_seen·Apr 16, 2026

last_seen·34m ago

sessions·100

events·100

$ sikker protocols 152.89.61.139

SSH

100 / 100

$ sikker summary 152.89.61.139

152.89.61.139 has a threat confidence score of 85%. This IP address from Ukraine (AS30860, Virtual Systems LLC) has been observed in 100 honeypot sessions targeting SSH protocols. First observed on April 16, 2026, most recently active April 17, 2026.

$ sikker behaviors 152.89.61.139catalog →

lowSsh Kernel Name Discovery98x

Identifies SSH session activity where the attacker executes uname -s to retrieve the operating system name for basic host fingerprinting.

$ sikker primitives 152.89.61.139

ssh_uname_kernel_name100

$ sikker related 152.89.61.139

🇺🇦·More threats fromUkraine→AS·More threats fromVirtual Systems LLC→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
185.255.120.41	31%	20
31.42.184.252	31%	49
185.66.88.67	63%	635
95.214.232.18	88%	12,040
82.22.220.153	37%	4

IP Address	Confidence	Events
5.181.86.60	98%	22,404
45.12.1.49	86%	1,370
185.177.188.88	65%	55
5.181.86.179	98%	22,528
77.83.39.94	92%	42