188.16.168.138 has a low threat confidence level of 21%, originating from Perm, Russia, on the Rostelecom network (12389). It has been observed across 37 sessions targeting SMB, First observed on January 22, 2026, most recently active March 7, 2026.