AbuseIPDB » 2.26.122.241
2.26.122.241
This IP was reported 5 times. Confidence of
Abuse
is 15% : ?
ISP
VPSPay - vpspay.cloud
Usage Type
Data Center/Web Hosting/Transit
ASN
AS201988
Domain Name
vpspay.cloud
Country
🇫🇮
Finland
City
Helsinki, Uusimaa
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 2.26.122.241 :
This IP address has been reported a total of
5
times from
4 distinct
sources.
2.26.122.241 was first reported on
May 16th 2026 , and the most recent report was
1 month ago
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇸🇪
Victor Hernandez
2026-05-17 20:00:08
(1 month ago)
Fail2Ban (traefik-botsearch): Ban 2.26.122.241 after 38 failures
2.26.122.241 - - [15/May/2026:14:37 ...
show more
Fail2Ban (traefik-botsearch): Ban 2.26.122.241 after 38 failures
2.26.122.241 - - [15/May/2026:14:37:32 +0000] "GET /phpmyadmin/ HTTP/1.1" 400 6873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
2.26.122.241 - - [15/May/2026:14:37:32 +0000] "GET /exchange/autodiscover HTTP/1.1" 404 8700 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
Victor Hernandez
2026-05-17 18:46:49
(1 month ago)
Fail2Ban (traefik-auth): Ban 2.26.122.241 after 28 failures
2.26.122.241 - - [14/May/2026:09:19:39 + ...
show more
Fail2Ban (traefik-auth): Ban 2.26.122.241 after 28 failures
2.26.122.241 - - [14/May/2026:09:19:39 +0000] "GET /db.sql HTTP/1.1" 404 54964 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
2.26.122.241 - - [14/May/2026:09:19:39 +0000] "GET /.DS_Store HTTP/1.1" 404 1831 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
show less
Web App Attack
🇨🇦
Gowtham A
2026-05-17 01:30:04
(1 month ago)
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.241 - - [15/May/2026:15:33:03 +0000] "GET /.htp ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.241 - - [15/May/2026:15:33:03 +0000] "GET /.htpasswd HTTP/1.1" 401 18736 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
9 alerts in 52s | Action: ban 4h
show less
Web App Attack
🇷🇴
Jashuva P
2026-05-16 22:34:25
(1 month ago)
IP banned by Fail2Ban (traefik jail) after 17 hits.
2.26.122.241 - - [16/May/2026:22:37:06 +0000] "G ...
show more
IP banned by Fail2Ban (traefik jail) after 17 hits.
2.26.122.241 - - [16/May/2026:22:37:06 +0000] "GET /xmlrpc.php HTTP/1.1" 404 22516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
2.26.122.241 - - [16/May/2026:22:37:06 +0000] "POST /wp-login.php HTTP/1.1" 401 822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
show less
Web App Attack
🇷🇴
kp_5036
2026-05-16 22:09:30
(1 month ago)
AS201988 VPSPay bulletproof hosting. Active in SNI spoofing, hosting phishing kits, C2 infrastructur ...
show more
AS201988 VPSPay bulletproof hosting. Active in SNI spoofing, hosting phishing kits, C2 infrastructure, and proxy/VPN abuse services.
show less
Hacking
Exploited Host
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: