116.99.255.87 has a low threat confidence level of 35%, originating from Hanoi, Vietnam, on the Viettel Group network (7552). It has been observed across 3 sessions targeting SMB, First observed on March 7, 2026, most recently active March 7, 2026.