Elevated Risk
Elevated threat level 8/10 for IP 210.1.60.243 from 39 reported incidents.
Behavioral profile indicates cyber threat activity with 72% confidence.
More threatening than 79% of monitored IPs
IP Address
210.1.60.243
IPv4
Public
TH
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
TH
Location
CS LOXINFO Public Company...
ASN 9891
39
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Moderate Network Risk
The network hosting this IP (ASN 9891, operated by CS LOXINFO Public Company Limited.) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
62%
High Confidence
Confidence History
3. Nov 2025
72%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 210.1.60.243
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
TH
- ASN
- AS9891
- ISP
- CS LOXINFO Public Company Limited.
DNS Information
- Reverse DNS
- mail.pwd.co.th
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 39
- First Reported
- 2 Nov 2025
- Last Reported
- 3 Nov 2025, 15:59
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS9891
CS LOXINFO Public Company Limited.
TH
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10
Total IPs Monitored
454
Total Reports
45.4
Reports per IP
Network Context
This IP address belongs to CS LOXINFO Public Company Limited. (AS9891), which manages 10 IP addresses in our monitoring system. Out of these, 454 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,493 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
39
avg: 23
++
Network Comparison
Compared against 13 IPs in ASN 9891
Threat Level
8/10
network avg: 7.0
=
Total Reports
39
network avg: 31
+
Network CS LOXINFO Public Company Limited. has overall threat level 4/10
Geographic Comparison
Compared against 1,576 IPs in TH
Threat Level
8/10
country avg: 4.8
++
Total Reports
39
country avg: 14
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
30 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
39
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
12
Related IPs
6.9/10
Avg Threat
48%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
147.50.231.135
10/10
Confidence
96%
Reports
117
Location
TH
TH
147.50.227.79
10/10
Confidence
94%
Reports
21
Location
TH
TH
27.254.137.199
10/10
Confidence
70%
Reports
177
Location
TH
TH
147.50.231.76
10/10
Confidence
66%
Reports
36
Location
TH
TH
203.170.192.251
8/10
Confidence
62%
Reports
7
Location
TH
TH
147.50.231.51
0/10
Confidence
46%
Reports
3
Location
TH
TH
27.254.144.47
0/10
Confidence
36%
Reports
2
Location
TH
TH
147.50.231.36
7/10
Confidence
30%
Reports
1
Location
TH
TH
203.146.127.165
10/10
Confidence
28%
Reports
3
Location
TH
TH
203.172.41.219
6/10
Confidence
23%
Reports
1
Location
TH
TH
147.50.228.209
6/10
Confidence
16%
Reports
1
Location
TH
TH
27.254.134.98
6/10
Confidence
9%
Reports
1
Location
TH
TH
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
49.0.85.146
10/10
Confidence
100%
Reports
53
ISP
AIS Fibre
27.254.152.90
8/10
Confidence
99%
Reports
62
ISP
dragonhispeed
118.193.57.185
7/10
Confidence
98%
Reports
87
ISP
UCLOUD INFORMAT...
118.193.57.62
8/10
Confidence
98%
Reports
59
ISP
UCLOUD INFORMAT...
103.27.200.76
10/10
Confidence
98%
Reports
21
ISP
Bangmod Enterpr...
117.121.214.50
10/10
Confidence
98%
Reports
13
ISP
UIH
147.50.231.135
10/10
Confidence
96%
Reports
117
ISP
CS LOXINFO Publ...
118.194.251.144
10/10
Confidence
96%
Reports
78
ISP
UCLOUD INFORMAT...
118.194.251.58
10/10
Confidence
96%
Reports
65
ISP
UCLOUD INFORMAT...
152.32.247.22
10/10
Confidence
96%
Reports
45
ISP
UCLOUD INFORMAT...
118.194.250.113
10/10
Confidence
96%
Reports
31
ISP
UCLOUD INFORMAT...
202.183.141.189
8/10
Confidence
96%
Reports
14
ISP
SBN-ISPAWN-ISP ...
202.29.225.206
10/10
Confidence
96%
Reports
14
ISP
Chulalongkorn U...
165.154.51.225
8/10
Confidence
95%
Reports
86
ISP
UCLOUD INFORMAT...
165.154.51.221
8/10
Confidence
95%
Reports
67
ISP
UCLOUD INFORMAT...
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
72%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
187.108.1.130
8/10
Confidence
72%
Reports
4,633
Location
BR
BR
49.64.242.249
10/10
Confidence
72%
Reports
2,977
Location
CN
CN
92.63.197.55
8/10
Confidence
72%
Reports
2,582
Location
UA
UA
179.51.153.37
10/10
Confidence
72%
Reports
2,285
Location
BR
BR
198.235.24.42
10/10
Confidence
72%
Reports
1,054
Location
US
US
103.183.75.90
10/10
Confidence
72%
Reports
829
Location
ID
ID
147.185.133.104
10/10
Confidence
72%
Reports
750
Location
US
US
78.153.140.43
10/10
Confidence
72%
Reports
622
Location
GB
GB
45.144.212.136
7/10
Confidence
72%
Reports
604
Location
UA
UA
85.215.119.240
8/10
Confidence
72%
Reports
589
Location
DE
DE
45.79.181.104
10/10
Confidence
72%
Reports
576
Location
US
US
118.193.65.234
10/10
Confidence
72%
Reports
551
Location
GB
GB
118.193.58.187
10/10
Confidence
72%
Reports
483
Location
DE
DE
173.239.240.145
10/10
Confidence
72%
Reports
467
Location
US
US
130.12.180.55
10/10
Confidence
72%
Reports
463
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203