Check an IP Address, Domain Name, Subnet, or ASN

95.189.104.78 was found in our database!

$ whois 95.189.104.78

country·🇷🇺 Russia

isp·Rostelecom

asn·AS12389

network·Standard

$ sikker risk 95.189.104.78scoring →

confidence

63%High

first_seen·Jan 30, 2026

last_seen·12d ago

sessions·61

events·61

$ sikker protocols 95.189.104.78

FTP

40 / 40

SMB

21 / 21

$ sikker summary 95.189.104.78

95.189.104.78 has a threat confidence score of 63%. This IP address from Russia (AS12389, Rostelecom) has been observed in 61 honeypot sessions targeting FTP, SMB protocols. First observed on January 30, 2026, most recently active April 8, 2026.

$ sikker primitives 95.189.104.78

ftp_enter_passive_mode57 ftp_user_probe40 ftp_password_attempt40 ftp_set_binary_mode38 ftp_set_ascii_mode19 ftp_list_directory1 ftp_stor_reports_info_zip1 ftp_stor_scripts_info_zip1 ftp_list_directory_reports1 ftp_list_directory_scripts1 ftp_stor_pub_vendor_info_zip1 ftp_list_directory_pub_vendor1

$ sikker related 95.189.104.78

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→FTP·More threats targetingFTP→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
79.126.85.153	25%	29
90.188.38.227	49%	509
95.167.225.76	100%	2,496
2.63.211.145	78%	23,293
93.120.239.98	20%	42

IP Address	Confidence	Events
45.91.64.6	100%	16,491
85.113.129.96	97%	63
85.26.233.15	44%	7
95.84.134.53	98%	18
85.116.117.30	21%	69