2.63.139.2 has a threat confidence score of 13%. This IP address from Russia (AS12389, Rostelecom) has been observed in 12 honeypot sessions targeting SMB protocols. First observed on February 17, 2026, most recently active March 30, 2026.