95.189.48.39 has a threat confidence score of 26%. This IP address from Russia (AS12389, Rostelecom) has been observed in 66 honeypot sessions targeting SMB protocols. First observed on January 31, 2026, most recently active March 20, 2026.