52.4.241.170 has a low threat confidence level of 17%, originating from Ashburn, United States, on the Amazon.com, Inc. network (14618). It has been observed across 4 sessions targeting SMB, MSSQL, First observed on March 1, 2026, most recently active March 12, 2026.