117.2.125.84

117.2.125.84 is a threat-intelligence indicator (IPv4 address) classified as Suspicious, corroborated across 4 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.

Indicator facts

Type

IPv4 address

Indicator

117.2.125.84

Classification

Suspicious

Confidence

90 / 100

Corroboration

4 independent sources

First seen

2026-09-12

Last seen

2026-10-06

Network (ASN)

AS7552 — VIETEL-AS-AP Viettel Group

Country

VN

Tags

• ssh
• brute-force
• attacker
• sshpwauth
• scanner
• compromised

Related CVEs (6)

• CVE-2019-8331
• CVE-2018-20677
• CVE-2018-20676
• CVE-2018-14042
• CVE-2018-14040
• CVE-2016-10735

← Threat intelligence command center · Explore the indicator corpus