150.95.26.120

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
50% Elevated
23 reports
13 reporters · latest 3 days ago
ISP
ZCOM THAI
Usage Type
Data Center/Web Hosting/Transit
ASN
AS135161
Domain Name
internet.gmo
Country
🇹🇭 Thailand
City
Bangkok, Bangkok
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
23 from 13 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇺🇸 United States of America 3 🇫🇷 France 1
Most common categories Web App Attack 8 Hacking 3 Brute-Force 3 Exploited Host 1 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 Site.eu
Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)
Hacking Web App Attack
🇩🇪 4server
Port Scan Brute-Force Web App Attack
Anonymous
[ns31.kdns.gr] httpd-shell-path-probe: sites=www.stagia.gr; logs=/var/log/httpd/domains/stagia.gr.log; samples=/wp-content/themes/twentytwentyfour/functions.php
Hacking Web App Attack
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 100200. Observed at: 2026-11-08T12:36:21.000Z.
Web App Attack
🇺🇸 mnsf
Too many Status 40X (11)
Brute-Force Web App Attack
🇫🇷 LRob
Web exploit attempt | method: POST | path: /wp-content/plugins/linkfast/images/wp-simple.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:155.0) Gecko/20100101 Firefox/155.0
Hacking Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇺🇸 sandra361
Cloudflare WAF: 1 request from AS135161/TH | Action: block | GET HTTP/1.1 | Path: /wp-login.php | User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0
Web App Attack
🇩🇪 LRob
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /wp-login.php | 2026-09-10 04:28 UTC
Bad Web Bot
🇩🇪 EGP Abuse Dept
Scanning for web/db/file exploits on most-models.com
SQL Injection Bad Web Bot Web App Attack
🇩🇪 Hazzard
(wordpress) Failed wordpress login from 150.95.26.120 (JP/Japan/-/-/v150-95-26-120.a00d.g.bkk1.static.cnode.io/[redacted]): (CF_ENABLE)
Brute-Force
🇩🇪 LRob
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
Anonymous
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.23.95.14
🇲🇽 149.19.169.149
🇳🇱 109.160.32.149
🇺🇸 104.154.116.23
🇧🇷 54.207.105.3
🇬🇧 35.203.210.237
🇧🇪 207.175.85.46
🇧🇷 201.32.76.218
🇳🇱 193.47.62.111
🇧🇷 186.238.178.6
🇬🇧 185.230.216.5
🇨🇳 171.37.165.98
🇺🇸 162.216.149.84
🇳🇬 152.32.140.22
🇵🇰 119.73.1.80
🇳🇱 109.160.32.145
🇬🇧 87.236.176.71
🇳🇱 45.227.255.157
🇺🇸 31.134.4.222
🇷🇴 2.57.121.25
feedback