109.197.117.149 has a threat confidence score of 33%. This IP address from Russia (AS50760, Mozhaisk Computer Networks Ltd.) has been observed in 138 honeypot sessions targeting SMB protocols. First observed on January 23, 2026, most recently active March 18, 2026.