169.0.123.249 has a low threat confidence level of 36%, originating from Cape Town, South Africa, on the AFRIHOST-SP network (37611). It has been observed across 23 sessions targeting SMB, First observed on February 2, 2026, most recently active February 10, 2026.