87.117.38.91 has a low threat confidence level of 27%, originating from Russia, on the Rostelecom network (21479). It has been observed across 18 sessions targeting SMB, First observed on February 22, 2026, most recently active March 6, 2026.