Check an IP Address, Domain Name, Subnet, or ASN

176.208.52.59 was found in our database!

$ whois 176.208.52.59

country·🇷🇺 Russia

city·Novy Urengoy

isp·Rostelecom

asn·AS12389

network·Standard

$ sikker risk 176.208.52.59scoring →

confidence

65%High

first_seen·Mar 1, 2026

last_seen·21d ago

sessions·9

events·9

$ sikker protocols 176.208.52.59

SMB

9 / 9

$ sikker summary 176.208.52.59

176.208.52.59 has a threat confidence score of 65%. This IP address from Russia (AS12389, Rostelecom) has been observed in 9 honeypot sessions targeting SMB protocols. First observed on March 1, 2026, most recently active March 1, 2026.

$ sikker primitives 176.208.52.59

smb_samr_rpc_bind6 smb_named_pipe_wkssvc_access6 smb_root_read4 smb_ipc_share_access4 smb_rpc_wkssvc_op0_netwkstagetinfo4 smb_srvsvc_rpc_bind2 smb_srvsvc_pipe_open2

$ sikker related 176.208.52.59

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
2.63.211.145	79%	20,010
90.188.116.232	25%	72
81.23.152.247	25%	74
31.163.86.141	44%	31
87.225.108.138	23%	24

IP Address	Confidence	Events
81.29.142.100	100%	27,558
85.192.137.28	30%	59
178.185.70.178	47%	8
178.178.194.151	46%	255
87.103.192.27	18%	31