82.208.111.237 has a low threat confidence level of 35%, originating from Nizhniy Novgorod, Russia, on the Rostelecom network (12389). It has been observed across 132 sessions targeting SMB, First observed on January 21, 2026, most recently active March 6, 2026.