89.109.55.27 has a low threat confidence level of 22%, originating from Nizhniy Novgorod, Russia, on the Rostelecom network (12389). It has been observed across 22 sessions targeting SMB, First observed on February 10, 2026, most recently active March 6, 2026.