212.102.51[.]249IP address
Reported by 1 independent source · first reported by GreyNoise · last reported
Last reported 17 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Ivanti EPMM Zero-Days: Reconnaissance to Exploitation“We initialy observed a small number of attempts to exploit CVE-2025-4427 from one IP address — 212.102.51[.]249 — on 2025-05-16 (~02:30 GMT), but only attacking our Ivanti sensors, so the attacks are unlikely to be random/opportunistic in nature”
Indicators reported together
named in the same reports- 11.12.0[.]4in 1 report
- 12.3.0[.]1in 1 report
- 12.4.0[.]1in 1 report
- 12.3.0[.]2in 1 report
- 12.4.0[.]2in 1 report
- 12.5.0[.]1in 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2025-4427, CVE-2025-4428
Thanks — we review every report.