Check an IP Address, Domain Name, Subnet, or ASN

125.3.238.102 was found in our database!

$ whois 125.3.238.102

country·🇯🇵 Japan

network·Standard

$ sikker risk 125.3.238.102scoring →

confidence

56%Medium

first_seen·Mar 30, 2026

last_seen·1h ago

sessions·2

events·2

$ sikker protocols 125.3.238.102

TELNET

2 / 2

$ sikker summary 125.3.238.102

125.3.238.102 has a threat confidence score of 56%. This IP address from Japan has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 30, 2026, most recently active April 3, 2026.

$ sikker primitives 125.3.238.102

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_busybox_binary_invocation6 telnet_command_sh4 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_command_iptables_flush2

$ sikker related 125.3.238.102

🇯🇵·More threats fromJapan→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
139.162.116.22	54%	1,022
220.210.131.9	19%	6
139.162.117.40	70%	858
150.246.249.149	99%	3,994
157.7.195.26	31%	9