Check an IP Address, Domain Name, Subnet, or ASN

89.25.212.35 was found in our database!

$ whois 89.25.212.35

country·🇵🇱 Poland

city·Katowice

isp·Play

asn·AS31242

network·Standard

$ sikker risk 89.25.212.35scoring →

confidence

82%Very High

first_seen·Mar 19, 2026

last_seen·1h ago

sessions·5

events·63

$ sikker protocols 89.25.212.35

TELNET

5 / 63

$ sikker summary 89.25.212.35

89.25.212.35 has a threat confidence score of 82%. This IP address from Poland (AS31242, Play) has been observed in 5 honeypot sessions targeting TELNET protocols. First observed on March 19, 2026, most recently active March 26, 2026.

$ sikker primitives 89.25.212.35

telnet_command_cd55 telnet_busybox_echo_redirect_file_create55 telnet_shell_execute_writable_hidden_file55 telnet_command_sh20 telnet_busybox_binary_invocation20 telnet_command_ping5 telnet_command_shell5 telnet_command_enable5 telnet_command_system5 telnet_command_linuxshell5 telnet_busybox_hostname_set5 telnet_busybox_wget_execution5 telnet_sh_execute_downloaded_script5 telnet_busybox_ftpget_remote_file_download5 telnet_busybox_tftp_get_remote_file_stdout5 telnet_curl_remote_script_stdout_execution5

$ sikker related 89.25.212.35

🇵🇱·More threats fromPoland→AS·More threats fromPlay→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
193.106.245.20	100%	422
89.25.234.143	95%	22

IP Address	Confidence	Events
185.16.39.146	83%	13,737
149.50.107.12	97%	6,088
149.86.227.60	95%	6,012
91.218.202.248	81%	4,226
195.3.221.8	78%	6,631