1.0.248.39 - IPInfo

Basic Info

City: Pattani

Region: Pattani

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.0.248.246	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/1.0.248.246/ TH - 1H : (218) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TH NAME ASN : ASN23969 IP : 1.0.248.246 CIDR : 1.0.248.0/21 PREFIX COUNT : 1783 UNIQUE IP COUNT : 1183744 WYKRYTE ATAKI Z ASN23969 : 1H - 2 3H - 10 6H - 15 12H - 23 24H - 47 DateTime : 2019-10-02 23:25:10 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery	2019-10-03 08:41:26

Type

Details

Datetime

1.0.248.246

attackbots

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/1.0.248.246/ 
 TH - 1H : (218)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TH 
 NAME ASN : ASN23969 
 
 IP : 1.0.248.246 
 
 CIDR : 1.0.248.0/21 
 
 PREFIX COUNT : 1783 
 
 UNIQUE IP COUNT : 1183744 
 
 
 WYKRYTE ATAKI Z ASN23969 :  
  1H - 2 
  3H - 10 
  6H - 15 
 12H - 23 
 24H - 47 
 
 DateTime : 2019-10-02 23:25:10 
 
 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN  - data recovery

2019-10-03 08:41:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.0.248.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22088
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.0.248.39.			IN	A

;; AUTHORITY SECTION:
.			530	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022302 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 08:23:14 CST 2022
;; MSG SIZE  rcvd: 103

Host info

39.248.0.1.in-addr.arpa domain name pointer node-nqf.pool-1-0.dynamic.totinternet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
39.248.0.1.in-addr.arpa	name = node-nqf.pool-1-0.dynamic.totinternet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
213.6.141.114	attack	Sending SPAM email	2019-09-25 16:53:49
185.179.157.0	attackspam	Scanning and Vuln Attempts	2019-09-25 17:14:37
185.28.38.111	attack	Scanning and Vuln Attempts	2019-09-25 16:57:40
185.170.210.65	attackbots	Scanning and Vuln Attempts	2019-09-25 17:17:52
118.69.174.108	attackspam	FTP Brute-Force	2019-09-25 17:26:09
111.67.71.50	attack	Unauthorized IMAP connection attempt	2019-09-25 17:31:45
118.36.139.75	attack	Sep 25 08:02:20 bouncer sshd\[5029\]: Invalid user Guest from 118.36.139.75 port 60146 Sep 25 08:02:20 bouncer sshd\[5029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.36.139.75 Sep 25 08:02:22 bouncer sshd\[5029\]: Failed password for invalid user Guest from 118.36.139.75 port 60146 ssh2 ...	2019-09-25 17:32:12
110.229.163.148	attackbotsspam	Unauthorised access (Sep 25) SRC=110.229.163.148 LEN=40 TTL=49 ID=1401 TCP DPT=8080 WINDOW=38560 SYN	2019-09-25 17:18:56
88.214.26.45	attackbots	09/25/2019-10:25:01.987730 88.214.26.45 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-09-25 16:58:01
81.22.45.65	attack	Port scan on 3 port(s): 39180 39215 39919	2019-09-25 17:04:04
51.140.103.202	attackbotsspam	Sep 25 03:24:38 XXXXXX sshd[65294]: Invalid user debian from 51.140.103.202 port 58032	2019-09-25 16:53:25
189.126.67.230	attack	2019-09-24 22:50:07 H=(67-230.provedornet.com.br) [189.126.67.230]:37912 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-24 22:50:08 H=(67-230.provedornet.com.br) [189.126.67.230]:37912 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/189.126.67.230) 2019-09-24 22:50:08 H=(67-230.provedornet.com.br) [189.126.67.230]:37912 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/189.126.67.230) ...	2019-09-25 16:56:25
189.59.119.14	attackspam	Sep 25 07:55:11 cp sshd[22244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.59.119.14	2019-09-25 17:08:47
211.24.103.163	attackspambots	2019-09-25T09:23:54.219064abusebot-7.cloudsearch.cf sshd\[10465\]: Invalid user Admin from 211.24.103.163 port 42943	2019-09-25 17:25:11
49.88.112.78	attackbotsspam	SSH bruteforce	2019-09-25 17:16:14

Recently Reported IPs

1.0.248.29	1.0.248.42	1.0.248.48	1.0.248.5
1.0.248.8	1.0.248.88	1.0.249.10	1.0.249.106
1.0.249.113	1.0.249.120	1.0.249.123	1.0.249.13
1.0.249.14	1.0.249.141	1.0.249.159	1.0.249.170
1.0.249.182	1.0.249.191	1.0.249.201	10.85.232.62