80.170.6.4 has a moderate threat confidence level of 54%, originating from Karlshamn, Sweden, on the Tele2 SWIPnet network (1257). It has been observed across 199 sessions targeting SSH, First observed on January 21, 2026, most recently active March 2, 2026.