78.140.225.26 has a low threat confidence level of 20%, originating from Russia, on the JSC Severen-Telecom network (24739). It has been observed across 30 sessions targeting SMB, First observed on January 21, 2026, most recently active March 4, 2026.