94.78.223.211 has a low threat confidence level of 37%, originating from Krasnoyarsk, Russia, on the Rostelecom network (12389). It has been observed across 10 sessions targeting SMB, First observed on March 3, 2026, most recently active March 6, 2026.