JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 110.78.148.240

110.78.148.240 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 4%: ?

ISP	10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
Usage Type	Fixed Line ISP
ASN	AS131090
Domain Name	ntplc.co.th
Country	🇹🇭 Thailand
City	Chon Buri, Chon Buri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 110.78.148.240

Whois 110.78.148.240

IP Abuse Reports for 110.78.148.240:

This IP address has been reported a total of 13 times from 10 distinct sources. 110.78.148.240 was first reported on December 31st 2020, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-07-25 01:18:42 (1 day ago)	[01:18] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1. ... show more [01:18] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇫🇮 6kilowatti	2026-04-07 07:48:09 (3 months ago)	2026-04-07T10:48:08.671999+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-04-07T10:48:08.671999+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=110.78.148.240 DST=5.61.88.83 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=2167 DF PROTO=TCP SPT=59062 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Invisiblemen	2021-12-08 23:17:04 (4 years ago)	Unauthorized connection attempt from IP address 110.78.148.240 on Port 445(SMB)	Port Scan
🇩🇪 Little Iguana	2021-11-24 21:47:08 (4 years ago)	trying to access non-authorized port	Port Scan
🇪🇸 samelarmain.com	2021-11-20 19:13:43 (4 years ago)	Apr 2 09:05:21 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 59 secs\): user= ... show more Apr 2 09:05:21 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 59 secs\): user=\<lucindo\>, method=PLAIN, rip=110.78.148.240, lip=10.64.89.208, TLS: Disconnected, session=\<+Acc9fe+RI5uTpTw\> Apr 2 20:24:58 WHD8 dovecot: imap-login: Disconnected \(auth failed, 2 attempts in 16 secs\): user=\<[email protected]\>, method=PLAIN, rip=110.78.148.240, lip=10.64.89.208, TLS, session=\<Thc3dgG/ZqVuTpTw\> ... show less	Hacking Brute-Force
🇫🇷 Daguerian	2021-10-20 00:46:47 (4 years ago)	1634705206 - 10/20/2021 04:46:46 Host: 110.78.148.240/110.78.148.240 Port: 445 TCP Blocked ...	Port Scan
🇺🇸 digitama.co.id	2021-06-27 20:56:16 (5 years ago)	Bad Web Bot stopped by firewall	Web App Attack
🇪🇸 samelarmain.com	2021-05-13 15:00:30 (5 years ago)	Apr 2 09:05:21 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 59 secs\): user= ... show more Apr 2 09:05:21 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 59 secs\): user=\<lucindo\>, method=PLAIN, rip=110.78.148.240, lip=10.64.89.208, TLS: Disconnected, session=\<+Acc9fe+RI5uTpTw\> Apr 2 20:24:58 WHD8 dovecot: imap-login: Disconnected \(auth failed, 2 attempts in 16 secs\): user=\<[email protected]\>, method=PLAIN, rip=110.78.148.240, lip=10.64.89.208, TLS, session=\<Thc3dgG/ZqVuTpTw\> ... show less	Hacking Brute-Force
🇪🇸 samelarmain.com	2021-04-28 12:13:16 (5 years ago)	Apr 2 09:05:21 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 59 secs\): user= ... show more Apr 2 09:05:21 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 59 secs\): user=\<lucindo\>, method=PLAIN, rip=110.78.148.240, lip=10.64.89.208, TLS: Disconnected, session=\<+Acc9fe+RI5uTpTw\> Apr 2 20:24:58 WHD8 dovecot: imap-login: Disconnected \(auth failed, 2 attempts in 16 secs\): user=\<[email protected]\>, method=PLAIN, rip=110.78.148.240, lip=10.64.89.208, TLS, session=\<Thc3dgG/ZqVuTpTw\> ... show less	Hacking Brute-Force
🇫🇷 dromotique.com	2021-04-02 04:23:50 (5 years ago)	agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4 ... show more agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 message=CYGpfDld show less	Email Spam
🇳🇱 ggiinnoo	2021-04-02 04:00:00 (5 years ago)	Email server abuse	Email Spam Spoofing
🇪🇸 samelarmain.com	2021-04-02 03:05:23 (5 years ago)	Apr 2 09:05:21 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 59 secs\): user= ... show more Apr 2 09:05:21 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 59 secs\): user=\<lucindo\>, method=PLAIN, rip=110.78.148.240, lip=10.64.89.208, TLS: Disconnected, session=\<+Acc9fe+RI5uTpTw\> ... show less	Hacking Brute-Force
🇬🇧 sdos.es	2020-12-31 10:27:17 (5 years ago)	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version ... show more "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version: <?xml version" show less	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 202.53.15.130

🇧🇷 179.42.149.233

🇳🇱 91.92.47.120

🇵🇪 190.117.232.16

🇧🇷 177.172.61.26

🇧🇷 164.163.154.71

🇩🇪 130.12.182.98

🇵🇰 101.50.83.146

🇷🇺 91.122.160.174

🇮🇳 2409:40e1:113c:4ffb:dd89:e58e:560c:f0ae

🇰🇷 211.254.212.59

🇺🇸 207.90.244.12

🇷🇺 185.14.4.221

🇷🇺 178.166.134.37

🇨🇳 116.181.10.21

🇨🇳 112.122.141.43

🇺🇸 72.17.34.38

🇫🇷 217.182.253.249

🇭🇰 199.45.154.187

🇧🇴 190.181.27.37