212.154.203.144 has a low threat confidence level of 38%, originating from Pavlodar, Kazakhstan, on the JSC Kazakhtelecom network (50482). It has been observed across 17 sessions targeting SMB, First observed on February 27, 2026, most recently active March 3, 2026.