91.246.94.26 has a low threat confidence level of 22%, originating from Astana, Kazakhstan, on the JSC Transtelecom network (41798). It has been observed across 7 sessions targeting SMB, First observed on February 4, 2026, most recently active February 11, 2026.