Check an IP Address, Domain Name, Subnet, or ASN

123.25.35.198 was found in our database!

$ whois 123.25.35.198

country·🇻🇳 Vietnam

city·Hanoi

isp·VNPT Corp

asn·AS45899

network·Standard

$ sikker risk 123.25.35.198scoring →

confidence

63%High

first_seen·Apr 2, 2026

last_seen·3h ago

sessions·3

events·3

$ sikker protocols 123.25.35.198

SMB

3 / 3

$ sikker summary 123.25.35.198

123.25.35.198 has a threat confidence score of 63%. This IP address from Vietnam (AS45899, VNPT Corp) has been observed in 3 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on April 2, 2026, most recently active April 2, 2026.

$ sikker behaviors 123.25.35.198catalog →

highRemcom Remote Execution1x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 123.25.35.198

smb_empty_rpc_call1 smb_ipc_share_access1 smb_remcom_pipe_open1 smb_svcctl_pipe_open1

$ sikker related 123.25.35.198

🇻🇳·More threats fromVietnam→AS·More threats fromVNPT Corp→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
113.160.140.138	51%	471
14.241.205.77	35%	3
222.253.40.231	98%	48
14.241.172.84	20%	6
222.254.11.93	23%	1

IP Address	Confidence	Events
171.231.198.144	88%	399
27.79.0.252	84%	189
103.9.207.80	79%	4,518
115.75.34.43	34%	154
103.172.236.241	100%	887