195.26.254.22

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
101 reports
20 reporters · latest 3 minutes ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS40021
Hostname(s)
vmi3703523.contaboserver.net
Domain Name
contabo.com
Country
🇺🇸 United States of America
City
St. Louis, Missouri

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
101 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 93 🇩🇪 Germany 3 🇳🇱 Netherlands 2
Most common categories Port Scan 100 Hacking 9 Web App Attack 8 Brute-Force 2 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 xmission.com
Blocked by UFW (TCP on 8443) Source port: 54202 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 195.26.254.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 shabi
UFW Blocked [8443/TCP] Source: 195.26.254.22:54202 TTL: 246 Lenth: 44 TOS: 0x08
Port Scan
🇺🇸 MPL
tcp/8443 (22 or more attempts)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 8089) Source port: 46576 TTL: 245 Packet length: 44 TOS: 0x00 This report (for 195.26.254.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp ports: 8089,8443 (32 or more attempts)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 8089) Source port: 46576 TTL: 244 Packet length: 44 TOS: 0x08 This report (for 195.26.254.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp/8089 (30 or more attempts)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 8089) Source port: 46560 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 195.26.254.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 Aurealize
firewall port scanning detected. 2 or more observation(s) from 2026-11-10T21:22:52.000Z through 2026-11-10T21:22:52.000Z.
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 8088) Source port: 59054 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 195.26.254.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp ports: 8088,8089 (57 or more attempts)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 8088) Source port: 59054 TTL: 248 Packet length: 44 TOS: 0x00 This report (for 195.26.254.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 8088) Source port: 59054 TTL: 243 Packet length: 44 TOS: 0x08 This report (for 195.26.254.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp/8088 (33 or more attempts)
Port Scan
🇺🇸 RAP
2026-11-10 19:30:48 UTC Unauthorized activity to TCP port 8088. Web App
Port Scan Web App Attack

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 2400:cb00:932:1000:4ca2:96aa:f475:3d1b
🇺🇸 199.165.159.222
🇫🇮 193.187.110.160
🇺🇸 172.252.139.184
🇺🇸 172.252.134.246
🇸🇽 143.105.125.184
🇺🇸 20.172.68.4
🇩🇪 2400:cb00:932:1000:4154:5fea:d6f4:2066
🇫🇷 217.76.52.66
🇲🇽 201.138.143.207
🇺🇸 195.184.76.235
🇺🇸 147.182.221.231
🇩🇪 109.160.32.37
🇷🇴 92.118.39.14
🇳🇱 77.239.124.151
🇩🇪 69.5.169.106
🇺🇸 45.206.93.121
🇺🇸 43.172.81.176
🇺🇸 40.223.140.231
🇺🇸 40.223.133.185
feedback