189.28.166.99 has a threat confidence score of 44%. This IP address from Brazil (AS28300, Speed Servicos de Internet Ltda) has been observed in 363 honeypot sessions targeting SMB protocols. First observed on January 20, 2026, most recently active March 21, 2026.