79.171.12.254 has a low threat confidence level of 29%, originating from Russia, on the PJSC MegaFon network (20632). It has been observed across 53 sessions targeting SMB, First observed on February 5, 2026, most recently active March 7, 2026.