138.252.29.2 has a threat confidence score of 10%. This IP address from Mongolia (AS9484, Mobinet LLC. AS Mobinet Internet Service Provider) has been observed in 7 honeypot sessions targeting SMB protocols. First observed on February 23, 2026, most recently active April 16, 2026.