JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

125.24.239.246

Recent Activity

Abuse Confidence Score

4% Caution

79 reports

54 reporters · latest 5 days ago

ISP: TOT Public Company Limited Bangkok
Usage Type: Fixed Line ISP
ASN: AS23969
Domain Name: totisp.net
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

79 from 54 distinct reporters

First reported

September 28th 2021

Most recent report

5 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 4

Most common categories Port Scan 4

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-11-10 11:20:59 UTC · (5 days ago)	3 incidents: malicious activity. First: 2026-10-29 07:23, Last: 2026-11-10 07:20 UTC. Triggers: unknown.	Port Scan
🇺🇸 micropedro	2026-10-23 12:10:19 UTC · (3 weeks ago)	3 incidents: malicious activity. First: 2026-10-19 18:46, Last: 2026-10-23 08:10 UTC. Triggers: unknown.	Port Scan
🇺🇸 micropedro	2026-10-16 19:46:26 UTC · (4 weeks ago)	3 incidents: malicious activity. First: 2026-10-05 07:29, Last: 2026-10-16 15:46 UTC. Triggers: unknown.	Port Scan
🇺🇸 micropedro	2026-09-29 22:52:35 UTC · (1 month ago)	3 incidents: malicious activity. First: 2026-09-22 20:19, Last: 2026-09-29 18:52 UTC. Triggers: unknown.	Port Scan
🇺🇸 micropedro	2026-09-09 23:47:51 UTC · (2 months ago)	3 incidents: malicious activity. First: 2026-08-25 17:10, Last: 2026-09-09 19:47 UTC. Triggers: unknown.	Port Scan
🇺🇸 micropedro	2026-08-20 10:38:12 UTC · (2 months ago)	3 incidents: malicious activity. First: 2026-06-27 21:30, Last: 2026-08-20 06:38 UTC. Triggers: ufw-repeater,unknown,ufw-repeater.	Port Scan
🇺🇸 micropedro	2026-06-21 00:31:19 UTC · (4 months ago)	4 incidents: malicious activity. First: 2026-06-09 06:16, Last: 2026-06-20 20:31 UTC. Triggers: ufw-repeater.	Port Scan
🇺🇸 micropedro	2026-06-09 10:16:23 UTC · (5 months ago)	3 incidents: malicious activity. First: 2026-05-30 19:40, Last: 2026-06-09 06:16 UTC. Triggers: ufw-repeater.	Port Scan
🇺🇸 micropedro	2026-06-06 23:44:48 UTC · (5 months ago)	3 incidents: malicious activity. First: 2026-05-30 19:40, Last: 2026-06-06 19:44 UTC. Triggers: ufw-repeater.	Port Scan
🇮🇳 evicky2002	2026-05-20 04:30:47 UTC · (5 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇿 yanek	2026-05-13 21:49:04 UTC · (6 months ago)	2026-05-13T22:47:56.654227+01:00 khatuna sshd-session[3387182]: Invalid user ayjtnzjc from 125.24.239.246 port 35984 2026-05-13T22:47:56.659328+01:00 khatuna sshd-session[3387182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt ... show more 2026-05-13T22:47:56.654227+01:00 khatuna sshd-session[3387182]: Invalid user ayjtnzjc from 125.24.239.246 port 35984 2026-05-13T22:47:56.659328+01:00 khatuna sshd-session[3387182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.24.239.246 2026-05-13T22:47:58.344879+01:00 khatuna sshd-session[3387182]: Failed password for invalid user ayjtnzjc from 125.24.239.246 port 35984 ssh2 2026-05-13T22:49:01.793375+01:00 khatuna sshd-session[3387487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.24.239.246 user=root 2026-05-13T22:49:03.771903+01:00 khatuna sshd-session[3387487]: Failed password for root from 125.24.239.246 port 42420 ssh2 ... show less	Brute-Force
🇩🇪 grassau.com	2026-05-13 21:47:01 UTC · (6 months ago)	(sshd) Failed SSH login from 125.24.239.246 (TH/Thailand/Bangkok/Bangkok/node-1bee.pool-125-24.dynamic.nt-isp.net)	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-13 21:40:25 UTC · (6 months ago)	125.24.239.246 (TH/Thailand/node-1bee.pool-125-24.dynamic.nt-isp.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 13 16:39:00 14406 sshd[10022]: Failed password for ro ... show more 125.24.239.246 (TH/Thailand/node-1bee.pool-125-24.dynamic.nt-isp.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 13 16:39:00 14406 sshd[10022]: Failed password for root from 124.121.31.77 port 60898 ssh2 May 13 16:38:58 14406 sshd[10022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.121.31.77 user=root May 13 16:40:05 14406 sshd[10244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.24.239.246 user=root May 13 16:35:26 14406 sshd[9741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.24.239.246 user=root May 13 16:35:27 14406 sshd[9741]: Failed password for root from 125.24.239.246 port 57530 ssh2 IP Addresses Blocked: 124.121.31.77 (TH/Thailand/ppp-124-121-31-77.revip2.asianet.co.th) show less	Brute-Force SSH
🇳🇴 Harald	2026-05-13 21:03:50 UTC · (6 months ago)	May 13 21:01:34 jump sshd[1443898]: Invalid user proxyuser from 125.24.239.246 port 54822 May 13 21:01:36 jump sshd[1443898]: Failed password for invalid user proxyuser from 125.24.239.246 port 54822 ssh2 May 13 21:03:50 jump sshd[1443997]: Invalid u ... show more May 13 21:01:34 jump sshd[1443898]: Invalid user proxyuser from 125.24.239.246 port 54822 May 13 21:01:36 jump sshd[1443898]: Failed password for invalid user proxyuser from 125.24.239.246 port 54822 ssh2 May 13 21:03:50 jump sshd[1443997]: Invalid user mc from 125.24.239.246 port 55574 ... show less	Brute-Force SSH
Anonymous	2026-05-13 20:54:01 UTC · (6 months ago)	(sshd) Failed SSH login from 125.24.239.246 (TH/Thailand/node-1bee.pool-125-24.dynamic.nt-isp.net)	Brute-Force SSH

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 89.21.67.159

🇦🇺 206.83.118.123

🇺🇸 142.93.63.15

🇨🇳 121.11.96.13

🇺🇸 92.38.211.70

🇳🇱 89.21.67.150

🇩🇪 84.33.251.121

🇳🇱 77.239.124.158

🇩🇪 69.5.169.171

🇳🇱 45.148.10.152

🇲🇦 105.157.146.55

🇩🇰 81.181.111.50

🇨🇳 222.210.35.197

🇰🇷 218.156.38.44

🇺🇸 205.210.31.83

🇧🇷 200.149.51.6

🇫🇷 194.5.53.131

🇺🇸 181.215.65.142

🇧🇷 177.75.236.42

🇻🇳 157.20.201.153