85.172.120.50 has a low threat confidence level of 36%, originating from Russia, on the Rostelecom network (33934). It has been observed across 101 sessions targeting SMB, First observed on February 3, 2026, most recently active March 7, 2026.