117.1.25.102 has a low threat confidence level of 30%, originating from Hanoi, Vietnam, on the Viettel Group network (7552). It has been observed across 86 sessions targeting SMB, First observed on January 21, 2026, most recently active March 7, 2026.