JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.58.150.20

103.58.150.20 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 30%: ?

30%

ISP	DE-CORP
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63989
Hostname(s)	host-103-58-150-20.thvps.com
Domain Name	thvps.com
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.58.150.20

Whois 103.58.150.20

IP Abuse Reports for 103.58.150.20:

This IP address has been reported a total of 25 times from 19 distinct sources. 103.58.150.20 was first reported on October 9th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-07-20 07:28:09 (11 hours ago)	Multiple unauthorized connection attempts	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-18 13:13:10 (2 days ago)	Multiple unauthorized connection attempts	Web App Attack
🇭🇺 bcsaba	2026-06-11 18:12:18 (1 month ago)	BAD BOT 103.58.150.20 - - [11/Jun/2026:20:12:15 +0200] "GET /_ignition/execute-solution HTTP/1.1" 40 ... show more BAD BOT 103.58.150.20 - - [11/Jun/2026:20:12:15 +0200] "GET /_ignition/execute-solution HTTP/1.1" 404 12502 "-" "Mozilla/5.0" show less	Web App Attack
🇩🇪 bescared	2026-06-11 17:59:00 (1 month ago)	WAF (2) - Malicious activity detected: URL probing.	Bad Web Bot Web App Attack Hacking
🇩🇪 london2038.com	2026-06-11 17:23:49 (1 month ago)	Probing for exploits 103.58.150.20 - - [11/Jun/2026:18:02:54 +0200] "GET /_ignition/execute-solution ... show more Probing for exploits 103.58.150.20 - - [11/Jun/2026:18:02:54 +0200] "GET /_ignition/execute-solution HTTP/1.1" 422 0 "-" "Mozilla/5.0" 103.58.150.20 - - [11/Jun/2026:19:23:46 +0200] "GET /_ignition/execute-solution HTTP/1.1" 422 0 "-" "Mozilla/5.0" show less	Hacking Web App Attack
🇺🇸 mnsf	2026-06-10 19:06:05 (1 month ago)	Too many Status 40X (29)	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-06-10 19:03:35 (1 month ago)	2.986 requests to many distinct domains in 1 hour (1w1d11h)	Brute-Force Bad Web Bot
🇵🇹 Subnet Shadow Specter	2026-06-10 18:11:57 (1 month ago)	[CRITICAL][Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting f ... show more [CRITICAL][Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting for PHP backdoors. [Method]: GET. [Request]: => /_ignition/execute-solution. Access revoked. [User-Agent]: Mozilla/5.0. [OS]: Unknown. [IP Address]: 103.58.150.20. [RPS] High overshoot requests per second (RPS). [Date]: 2026-06-10 17:53:35 UTC. show less	Bad Web Bot Hacking Web App Attack
🇺🇸 antlac1	2026-06-10 18:04:09 (1 month ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
🇨🇭 Origon	2026-06-10 17:57:11 (1 month ago)	http-cve-probing - IP: 103.58.150.20 - time="2026-06-10T19:57:10+02:00" level=info msg="(555f66b4f6 ... show more http-cve-probing - IP: 103.58.150.20 - time="2026-06-10T19:57:10+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 103.58.150.20 (TH/63989) : 4h ban on Ip 103.58.150.20" module=db show less	Web App Attack
🇮🇩 hermawan	2026-04-15 05:44:36 (3 months ago)	[Wed Apr 15 12:41:09.304419 2026] [security2:error] [pid 149121:tid 140666956936896] [client 103.58. ... show more [Wed Apr 15 12:41:09.304419 2026] [security2:error] [pid 149121:tid 140666956936896] [client 103.58.150.20:21715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "utf-8" at REQUEST_HEADERS:Accept-Charset. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "440015"] [msg "Bot Accept-Charset utf-8"] [data "Matched Data: utf-8 found within REQUEST_HEADERS:Accept-Charset: utf-8 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ad8k79Hrg33JgjVBCf0vQQAAANM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[149167] [B0ZfKfnILwo] [ad8k79Hrg33JgjVBCf0vQQAAANM] keep_alive=[0] [2026-04-15 12:41:09.389179] [R:ad8k79Hrg33JgjVBCf0vQQAAANM] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-04-15 03:55:28 (3 months ago)	[Wed Apr 15 10:54:58.051579 2026] [security2:error] [pid 77084:tid 140666822719168] [client 103.58.1 ... show more [Wed Apr 15 10:54:58.051579 2026] [security2:error] [pid 77084:tid 140666822719168] [client 103.58.150.20:39571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "utf-8" at REQUEST_HEADERS:Accept-Charset. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "440015"] [msg "Bot Accept-Charset utf-8"] [data "Matched Data: utf-8 found within REQUEST_HEADERS:Accept-Charset: utf-8 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ad8MEuZereCpFc5ZBObfMgAAARQ"], referer http://karangploso.jatim.bmkg.go.id:80 [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[77132] [t2furbeluAs] [ad8MEuZereCpFc5ZBObfMgAAARQ] keep_alive=[0] [2026-04-15 10:54:58.051583] [R:ad8MEuZereCpFc5ZBObfMgAAARQ] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:96.0) Gecko/20100101 Firefox/96.0' Host:'staklim-jatim.bmkg.go.id' Referer:'http://karangploso.jatim.bmkg.go.id:80 ... show less	Email Spam Hacking
🇮🇩 Burayot	2026-04-10 20:33:36 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 103.58.150.20 (TH/Thailand/host-103- ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 103.58.150.20 (TH/Thailand/host-103-58-150-20.thvps.com): 1 in the last 3600 secs show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-10-11 20:09:18 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-10-11 00:09:16 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇲 87.241.158.108

🇷🇴 80.94.92.179

🇫🇷 51.77.217.11

🇺🇸 207.97.143.10

🇩🇪 195.182.16.23

🇬🇧 157.245.34.56

🇺🇸 45.45.237.7

🇬🇧 35.203.211.116

🇩🇪 31.76.29.13

🇻🇳 27.79.2.127

🇵🇱 176.53.159.197

🇸🇬 172.111.97.20

🇺🇸 164.92.96.91

🇮🇩 103.210.121.64

🇮🇹 93.44.80.208

🇬🇧 86.24.89.47

🇧🇬 78.128.112.30

🇳🇱 77.239.124.250

🇺🇸 35.245.124.169

🇵🇱 176.53.159.198