112.213.105.254 has a low threat confidence level of 19%, originating from Hong Kong, on the CTG Server Limited network (152194). It has been observed across 8 sessions targeting SMB, First observed on January 25, 2026, most recently active February 6, 2026.