138.252.28.169 has a threat confidence score of 53%. This IP address from Mongolia (AS9484, Mobinet LLC. AS Mobinet Internet Service Provider) has been observed in 132 honeypot sessions targeting RDP protocols. First observed on March 28, 2026, most recently active April 8, 2026.