196.203.254.3 has a low threat confidence level of 35%, originating from Tunisia, on the TN-BB-AS Tunisia BackBone AS network (2609). It has been observed across 125 sessions targeting SMB, First observed on January 22, 2026, most recently active March 5, 2026.