Check an IP Address, Domain Name, Subnet, or ASN

2.89.20.175 was found in our database!

$ whois 2.89.20.175

country·🇸🇦 Saudi Arabia

city·Riyadh

isp·Saudi Telecom Company JSC

asn·AS25019

network·Standard

$ sikker risk 2.89.20.175scoring →

confidence

53%Medium

first_seen·Mar 26, 2026

last_seen·12h ago

sessions·1

events·1

$ sikker protocols 2.89.20.175

TELNET

1 / 1

$ sikker summary 2.89.20.175

2.89.20.175 has a threat confidence score of 53%. This IP address from Saudi Arabia (AS25019, Saudi Telecom Company JSC) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 26, 2026, most recently active March 26, 2026.

$ sikker primitives 2.89.20.175

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_busybox_binary_invocation3 telnet_command_sh2 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_iptables_flush1 telnet_rm_recursive_hidden_relative_cleanup1

$ sikker related 2.89.20.175

🇸🇦·More threats fromSaudi Arabia→AS·More threats fromSaudi Telecom Company JSC→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
188.52.178.24	95%	154
50.60.239.175	94%	39
51.211.211.78	54%	16
176.44.28.29	30%	2
51.211.30.245	51%	21

IP Address	Confidence	Events
188.52.178.24	95%	155
50.60.239.175	94%	39
43.164.77.109	94%	18
51.39.231.174	53%	13
51.211.211.78	54%	16