217.118.53.164 has a low threat confidence level of 30%, originating from Oslo, Norway, on the Globalconnect As network (2116). It has been observed across 35 sessions targeting SMB, First observed on February 14, 2026, most recently active March 5, 2026.