94.131.234.56 has a low threat confidence level of 23%, originating from Shymkent, Kazakhstan, on the Freedom Data Centers LLP network (58172). It has been observed across 13 sessions targeting SMB, First observed on February 21, 2026, most recently active March 6, 2026.