125.212.251.7 Threat Intelligence - Vietnam | IP Address Lookup

Share on:

General

IP Address
125.212.251.7
IPv4 Address
Location
🇻🇳 Vietnam
VN
Network
AS7552
Viettel Group
Threat Score
50/100
Medium Risk
blacklistbruteforceBruteforceBrute-ForcecowrieMalicious IPmalwaremalware-delivery
Attack Intelligence
MITRE ATT&CK Techniques
T1046 - Network Service Scanning, T1059.004 - Unix Shell, T1059 - Command and Scripting Interpreter, T1078 - Valid Accounts, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.001 - Password Guessing, T1110 - Brute Force, T1190 - Exploit Public-Facing Application, T1496 - Resource Hijacking, T1595.002 - Vulnerability Scanning
Noticed
7 times
Protocols Attacked
spam ssh
Passive DNS
g.v99api.win
Open Ports Detected
223001
Geographic Location
Country
Vietnam
City
Unknown
Region
Unknown
Coordinates
16.1667, 107.8333
Network Information
ASN
AS7552
Organization
Viettel Group
Network
AS7552 Viettel Group
WHOIS Information
inetnum
125.212.128.0 - 125.212.255.255
netname
VIETTEL-VN
descr
Viettel Group
country
VN
admin-c
TVT8-AP
tech-c
NDT9-AP
mnt-by
MAINT-VN-VNNIC
status
ALLOCATED PORTABLE
mnt-irt
IRT-VNNIC-AP
last-modified
2017-11-11T09:41:33Z
irt
IRT-VNNIC-AP
address
Ha Noi, VietNam
phone
+84-24-35564944
fax-no
+84-24-37821462
e-mail
hm-changed@vnnic.vn
abuse-mailbox
hm-changed@vnnic.vn
person
Nguyen Dang Tiep
nic-hdl
NDT9-AP
route
125.212.251.0/24
origin
AS24086
Attack Logs
DateTarget LocationProtocolLink
2026-10-15 Vultrtokyo SSH View Log
2021-08-13 Perth, Australia Spam View Log
As38731 Multiple View Log
Disclaimer
This page contains threat intelligence information for the IPv4 address 125.212.251.7 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only, and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.