156.155.15.232 has a low threat confidence level of 35%, originating from Johannesburg, South Africa, on the AFRIHOST-SP network (37611). It has been observed across 3 sessions targeting SMB, First observed on March 9, 2026, most recently active March 9, 2026.