JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.196.126.117

168.196.126.117 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 24%: ?

24%

ISP	COMCAST-SRL
Usage Type	Fixed Line ISP
ASN	AS264821
Hostname(s)	117-126-196-168-core.comcast-srl.com
Domain Name	comcast-sa.com
Country	🇩🇴 Dominican Republic
City	Villa Bisono, Santiago Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.196.126.117

Whois 168.196.126.117

IP Abuse Reports for 168.196.126.117:

This IP address has been reported a total of 10 times from 7 distinct sources. 168.196.126.117 was first reported on February 25th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-19 15:21:44 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 vtchost.com	2026-06-19 13:50:33 (2 weeks ago)	Jun 19 15:50:33 vtchost kernel: [23349.799217] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Jun 19 15:50:33 vtchost kernel: [23349.799217] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=168.196.126.117 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=30008 DF PROTO=TCP SPT=58631 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-08 15:41:41 (4 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇮🇩 hermawan	2026-05-29 01:06:17 (1 month ago)	[Fri May 29 08:06:17.102429 2026] [security2:error] [pid 1180263:tid 139852137866944] [client 168.19 ... show more [Fri May 29 08:06:17.102429 2026] [security2:error] [pid 1180263:tid 139852137866944] [client 168.196.126.117:46988] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/2.0 Request URI RAW = /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa Request Basename = 555558585-poster-antisipasi-gempa"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWA ... show less	Email Spam Hacking
🇬🇧 PeravixGroup	2026-05-19 20:15:35 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-12 00:00:51 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/168.196.126.117	SSH
🇦🇹 urnilxfgbez	2026-05-11 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-05-11 18:18:27 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 IP Analyzer	2026-04-01 19:30:32 (3 months ago)	Unauthorized connection attempt from IP address 168.196.126.117 on Port 445(SMB)	Port Scan
🇫🇷 vtchost.com	2026-02-25 06:09:21 (4 months ago)	bad user agent - known bad bot or invalid agent - possible botnet ...	Bad Web Bot

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c0b::120

🇧🇪 198.235.24.154

🇮🇳 182.95.226.138

🇧🇷 177.82.128.153

🇩🇪 167.94.146.52

🇹🇭 147.50.103.212

🇺🇸 129.121.97.147

🇭🇰 46.247.61.141

🇺🇸 45.43.58.58

🇺🇸 20.124.91.101

🇬🇧 2.58.172.185

🇺🇸 199.231.168.170

🇮🇩 180.243.252.152

🇻🇳 103.167.89.222

🇳🇱 91.92.40.43

🇩🇪 45.144.233.139

🇵🇱 2a09:bac5:506b:2969::420:25

🇺🇸 2607:f8b0:4001:c14::128

🇧🇴 200.105.141.172

🇳🇱 158.173.20.64