JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2.26.122.104

Neutral Activity

Abuse confidence score ?

0% Low Risk

5 reports

5 reporters · latest 4 months ago

ISP	VPSPay - vpspay.cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201988
Domain Name	vpspay.cloud
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2.26.122.104 has been reported 5 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2.26.122.104

This IP address has been reported a total of 5 times from 5 distinct sources. 2.26.122.104 was first reported on May 16th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Jashuva P	2026-05-17 19:34:44 (4 months ago)	[] [1:2001219:3] ET SCAN Potential SSH Scan [] [Classification: Attempted Information Leak] [Pri ... show more [] [1:2001219:3] ET SCAN Potential SSH Scan [] [Classification: Attempted Information Leak] [Priority: 2] 15/May/2026:23:52:58 +0000 {TCP} 2.26.122.104:51446 -> 10.239.59.36:8080 show less	Port Scan
🇺🇸 hackspare	2026-05-17 18:27:11 (4 months ago)	Fail2Ban (sshd): Ban 2.26.122.104 after 96 failures sshd[21279]: Failed password for invalid user gi ... show more Fail2Ban (sshd): Ban 2.26.122.104 after 96 failures sshd[21279]: Failed password for invalid user gitlab from 2.26.122.104 port 55333 ssh2 sshd[51010]: Failed password for ansible from 2.26.122.104 port 59186 ssh2 sshd[20273]: Failed password for invalid user www-data from 2.26.122.104 port 35688 ssh2 show less	Brute-Force SSH
🇩🇪 ThreatIq	2026-05-17 01:39:05 (4 months ago)	CrowdSec: crowdsecurity/ssh-slow-bf 155 failures in 512s sshd[5543]: Failed password for ubuntu from ... show more CrowdSec: crowdsecurity/ssh-slow-bf 155 failures in 512s sshd[5543]: Failed password for ubuntu from 2.26.122.104 port 34330 ssh2 sshd[63136]: Failed password for invalid user jenkins from 2.26.122.104 port 60942 ssh2 Action: ban 4h \| 15/May/2026:03:30:15 +0000 show less	Brute-Force SSH
🇷🇴 kp_5036	2026-05-16 22:28:12 (4 months ago)	CrowdSec Detection: crowdsecurity/ssh-slow-bf 11 failed auth in 281s sshd[20083]: Failed password fo ... show more CrowdSec Detection: crowdsecurity/ssh-slow-bf 11 failed auth in 281s sshd[20083]: Failed password for pi from 2.26.122.104 port 40904 ssh2 sshd[20086]: Failed password for invalid user user from 2.26.122.104 port 40908 ssh2 Decision: ban 4h at 15/May/2026:18:54:37 +0000 show less	Brute-Force SSH
🇷🇴 dlcoerks	2026-05-16 22:08:32 (4 months ago)	AS201988 VPSPay bulletproof hosting. Active in SNI spoofing, hosting phishing kits, C2 infrastructur ... show more AS201988 VPSPay bulletproof hosting. Active in SNI spoofing, hosting phishing kits, C2 infrastructure, and proxy/VPN abuse services. show less	Hacking Exploited Host

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.103.157.115

🇸🇬 97.74.87.152

🇧🇷 201.139.186.238

🇺🇸 198.153.94.124

🇧🇷 187.87.173.5

🇮🇩 160.22.126.54

🇨🇳 120.203.25.201

🇮🇩 103.76.120.87

🇱🇹 62.60.130.253

🇰🇪 197.248.17.185

🇵🇪 190.233.86.21

🇦🇹 150.251.225.226

🇺🇸 70.183.193.103

🇺🇸 20.118.219.154

🇺🇸 13.140.37.238

🇺🇸 4.246.225.140

🇨🇳 2409:8c44:b00:ff16::51

🇨🇳 182.116.81.35

🇹🇼 128.14.226.236

🇺🇸 72.202.225.82