2.60.252.90 has a threat confidence score of 46%. This IP address from Russia (AS12389, Rostelecom) has been observed in 160 honeypot sessions targeting SSH protocols. First observed on January 21, 2026, most recently active March 25, 2026.