85.173.112.81 has a threat confidence score of 21%. This IP address from Russia (AS43132, Rostelecom) has been observed in 35 honeypot sessions targeting SMB protocols. First observed on January 30, 2026, most recently active March 11, 2026.