Check an IP Address, Domain Name, Subnet, or ASN

89.109.11.252 was found in our database!

$ whois 89.109.11.252

country·🇷🇺 Russia

city·Nizhniy Novgorod

isp·Rostelecom

asn·AS12389

network·Standard

$ sikker risk 89.109.11.252scoring →

confidence

41%Medium

first_seen·Jan 21, 2026

last_seen·1h ago

sessions·263

events·263

$ sikker protocols 89.109.11.252

SMB

263 / 263

$ sikker summary 89.109.11.252

89.109.11.252 has a threat confidence score of 41%. This IP address from Russia (AS12389, Rostelecom) has been observed in 263 honeypot sessions targeting SMB protocols. First observed on January 21, 2026, most recently active March 18, 2026.

$ sikker related 89.109.11.252

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
176.211.0.123	57%	18
5.142.11.133	44%	6
31.163.116.73	52%	12
2.63.211.145	79%	19,495
83.171.89.209	100%	424

IP Address	Confidence	Events
178.49.109.109	100%	708
83.239.79.234	32%	68
45.132.19.23	97%	68
91.230.137.48	32%	100
178.205.247.223	69%	12