217.118.52.205 has a low threat confidence level of 19%, originating from Oslo, Norway, on the Globalconnect As network (2116). It has been observed across 16 sessions targeting SMB, First observed on January 28, 2026, most recently active February 20, 2026.