Check an IP Address, Domain Name, Subnet, or ASN

125.138.241.243 was found in our database!

$ whois 125.138.241.243

country·🇰🇷 South Korea

city·Cheonan

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 125.138.241.243scoring →

confidence

79%High

first_seen·Mar 16, 2026

last_seen·1h ago

sessions·7

events·7

$ sikker protocols 125.138.241.243

TELNET

7 / 7

$ sikker summary 125.138.241.243

125.138.241.243 has a threat confidence score of 79%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 7 honeypot sessions targeting TELNET protocols. First observed on March 16, 2026, most recently active March 22, 2026.

$ sikker primitives 125.138.241.243

telnet_command_cd77 telnet_busybox_echo_redirect_file_create77 telnet_shell_execute_writable_hidden_file77 telnet_command_sh28 telnet_busybox_binary_invocation28 telnet_command_ping7 telnet_command_shell7 telnet_command_enable7 telnet_command_system7 telnet_command_linuxshell7 telnet_busybox_hostname_set7 telnet_busybox_wget_execution7 telnet_sh_execute_downloaded_script7 telnet_busybox_ftpget_remote_file_download7 telnet_busybox_tftp_get_remote_file_stdout7 telnet_curl_remote_script_stdout_execution7

$ sikker related 125.138.241.243

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
220.92.117.221	89%	2,804
183.110.216.135	97%	4,926
183.110.216.133	97%	2,996
222.99.52.202	52%	460
222.117.0.253	59%	806

IP Address	Confidence	Events
220.92.117.221	89%	2,805
113.131.200.3	89%	11
43.155.205.171	97%	2,147
175.118.127.138	99%	142
43.155.173.135	96%	2,349