89.218.149.165 has a low threat confidence level of 27%, originating from Shymkent, Kazakhstan, on the JSC Kazakhtelecom network (9198). It has been observed across 49 sessions targeting SMB, First observed on February 2, 2026, most recently active March 6, 2026.