Check an IP Address, Domain Name, Subnet, or ASN

54.89.89.12 was found in our database!

$ whois 54.89.89.12

country·🇺🇸 United States

city·Ashburn

isp·Amazon.com, Inc.

asn·AS14618

network·Standard

$ sikker risk 54.89.89.12scoring →

confidence

44%Medium

first_seen·Mar 12, 2026

last_seen·1h ago

sessions·12

events·12

$ sikker protocols 54.89.89.12

HTTP

5 / 5

HTTPS

3 / 3

ELASTICSEARCH

2 / 2

RDP

1 / 1

SSH

1 / 1

$ sikker summary 54.89.89.12

54.89.89.12 has a threat confidence score of 44%. This IP address from United States (AS14618, Amazon.com, Inc.) has been observed in 12 honeypot sessions targeting HTTP, HTTPS, ELASTICSEARCH, RDP, SSH protocols. First observed on March 12, 2026, most recently active March 20, 2026.

$ sikker behaviors 54.89.89.12catalog →

infoHttp Root Path Request5x

Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.

$ sikker primitives 54.89.89.12

http_method_get5 elastic_http_get_request2 elastic_http_bad_request_path_probe2

$ sikker related 54.89.89.12

🇺🇸·More threats fromUnited States→AS·More threats fromAmazon.com, Inc.→HTTP·More threats targetingHTTP→HTTP·More threats targetingHTTPS→ELAS·More threats targetingELASTICSEARCH→RDP·More threats targetingRDP→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
54.234.81.236	49%	6
3.213.226.45	62%	1,323
3.82.92.91	53%	19
54.227.126.11	72%	16
34.238.176.206	61%	16

IP Address	Confidence	Events
64.64.116.14	84%	3,124
144.172.105.60	98%	26,667
209.38.71.248	83%	15
20.118.227.29	64%	103
15.204.128.147	96%	1,568