Extreme Threat
IP 125.247.116.158 classified at threat level 10/10 with 37 documented attacks.
Advanced threat indicators confirmed with 6% certainty.
More threatening than 93% of monitored IPs
IP Address
125.247.116.158
IPv4
Public
KR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
KR
Location
DACOM-PUBNETPLUS
ASN 9316
37
Reports
Honeypot
Data Source
Threat Categories
SSH
28
Hacking
7
Exploited Host
3
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 9316) with generally good reputation. The ISP DACOM-PUBNETPLUS maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
4%
Low Confidence
Confidence History
8. Mar 2026 - 2. Jun 2026
6%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 125.247.116.158
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KR
- ASN
- AS9316
- ISP
- DACOM-PUBNETPLUS
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 37
- First Reported
- 8 Mar 2026
- Last Reported
- 2 Jun 2026, 16:39
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS9316
DACOM-PUBNETPLUS
KR
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
5
Total IPs Monitored
29
Total Reports
5.8
Reports per IP
Network Context
This IP address belongs to DACOM-PUBNETPLUS (AS9316), which manages 5 IP addresses in our monitoring system. Out of these, 29 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 936,608 reported IPs worldwide
Threat Level
10/10
avg: 6.2
++
Total Reports
37
avg: 8
++
Network Comparison
Compared against 15 IPs in ASN 9316
Threat Level
10/10
network avg: 7.2
+
Total Reports
37
network avg: 6
++
Network DACOM-PUBNETPLUS has overall threat level 2/10
Geographic Comparison
Compared against 4,952 IPs in KR
Threat Level
10/10
country avg: 7.3
+
Total Reports
37
country avg: 12
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
13 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
35
Hacking
8
Exploited Host
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 18:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
851,130 threat incidents tracked globally • Last 24h: 212,795 Logs
FEED
Top Threat Sources
-
01
United States170,503 20% -
02
Brazil132,226 15.5%
-
03
India93,644 11%
-
04
China47,610 5.6%
-
05
SC29,335 3.4%
-
06
Argentina20,079 2.4%
-
07
Germany19,753 2.3%
-
08
Pakistan19,273 2.3%
-
09
Netherlands18,725 2.2%
-
10
Colombia16,637 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
14
Related IPs
7/10
Avg Threat
13%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
180.80.105.148
8/10
Confidence
78%
Reports
13
Location
KR
KR
58.29.139.177
5/10
Confidence
20%
Reports
1
Location
KR
KR
211.173.101.140
4/10
Confidence
20%
Reports
1
Location
KR
KR
58.29.149.158
10/10
Confidence
19%
Reports
14
Location
KR
KR
125.244.218.175
7/10
Confidence
15%
Reports
1
Location
KR
KR
125.244.114.221
8/10
Confidence
12%
Reports
6
Location
KR
KR
125.250.16.92
7/10
Confidence
8%
Reports
1
Location
KR
KR
125.247.209.8
7/10
Confidence
3%
Reports
2
Location
KR
KR
122.153.128.199
7/10
Confidence
3%
Reports
1
Location
KR
KR
58.29.206.130
7/10
Confidence
2%
Reports
1
Location
KR
KR
122.153.193.187
7/10
Confidence
0%
Reports
2
Location
KR
KR
125.243.207.185
7/10
Confidence
0%
Reports
1
Location
KR
KR
125.251.19.136
7/10
Confidence
0%
Reports
1
Location
KR
KR
125.243.104.152
7/10
Confidence
0%
Reports
1
Location
KR
KR
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
14.206.0.20
10/10
Confidence
100%
Reports
44
ISP
Piranha Systems
61.43.121.132
10/10
Confidence
100%
Reports
31
ISP
LG DACOM Corpor...
211.220.197.170
10/10
Confidence
100%
Reports
25
ISP
Korea Telecom
185.227.152.135
10/10
Confidence
100%
Reports
23
ISP
Cloudie Limited
1.209.110.147
10/10
Confidence
98%
Reports
32
ISP
LG DACOM Corpor...
115.68.17.246
10/10
Confidence
96%
Reports
164
ISP
SMILESERV
220.117.241.220
10/10
Confidence
96%
Reports
65
ISP
Korea Telecom
43.128.136.162
10/10
Confidence
96%
Reports
61
ISP
Tencent Buildin...
58.229.240.73
10/10
Confidence
96%
Reports
54
ISP
SK Broadband Co...
175.125.94.182
10/10
Confidence
96%
Reports
51
ISP
SK Broadband Co...
211.62.111.247
10/10
Confidence
96%
Reports
44
ISP
Korea Telecom
175.196.78.7
10/10
Confidence
96%
Reports
37
ISP
Korea Telecom
14.53.202.223
10/10
Confidence
96%
Reports
36
ISP
Korea Telecom
121.159.244.130
10/10
Confidence
96%
Reports
25
ISP
Korea Telecom
125.141.83.17
8/10
Confidence
96%
Reports
23
ISP
Korea Telecom
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
6%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
20.203.219.190
10/10
Confidence
6%
Reports
5
Location
CH
CH
146.70.113.124
10/10
Confidence
6%
Reports
4
Location
HK
HK
91.92.40.48
10/10
Confidence
6%
Reports
3
Location
NL
NL
185.238.219.63
10/10
Confidence
6%
Reports
3
Location
DE
DE
185.238.219.20
10/10
Confidence
6%
Reports
3
Location
DE
DE
185.238.219.22
10/10
Confidence
6%
Reports
3
Location
DE
DE
185.238.219.13
10/10
Confidence
6%
Reports
3
Location
DE
DE
185.238.219.61
10/10
Confidence
6%
Reports
3
Location
DE
DE
185.238.219.8
10/10
Confidence
6%
Reports
3
Location
DE
DE
18.119.13.81
10/10
Confidence
6%
Reports
3
Location
US
US
185.238.219.36
10/10
Confidence
6%
Reports
3
Location
DE
DE
185.238.219.32
10/10
Confidence
6%
Reports
3
Location
DE
DE
185.238.219.45
10/10
Confidence
6%
Reports
3
Location
DE
DE
185.238.219.25
10/10
Confidence
6%
Reports
3
Location
DE
DE
178.214.77.12
10/10
Confidence
6%
Reports
3
Location
PS
PS