JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.198.126.22

192.198.126.22 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 25%: ?

25%

ISP	Server Mania Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55286
Domain Name	servermania.com
Country	🇺🇸 United States of America
City	El Segundo, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.198.126.22

Whois 192.198.126.22

IP Abuse Reports for 192.198.126.22:

This IP address has been reported a total of 22 times from 14 distinct sources. 192.198.126.22 was first reported on February 14th 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-05-28 01:11:45 (2 weeks ago)	[ThuMay2803:11:42.0616412026][security2:error][pid1761968:tid1762197][client192.198.126.22:0]ModSecu ... show more [ThuMay2803:11:42.0616412026][security2:error][pid1761968:tid1762197][client192.198.126.22:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.aid-web.ch.81-17-25-250.cpanel.site\"][uri\"/.env.local\"][unique_id\"aheWTuhiBrwMIdqfcjEWZQAAAQg\"] show less	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-27 22:00:44 (2 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-26. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-05-27 17:46:25 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 192.198.126.22 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 192.198.126.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 13:46:14.142809 2026] [security2:error] [pid 5294:tid 5294] [client 192.198.126.22:44289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vittariafashion.vittariadesign.com"] [uri "/.env.development.local"] [unique_id "ahct5vGzahQWcKZNJ9puNQAAAAw"], referer: https://www.google.com/search?q=www.vittariafashion.vittariadesign.com show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-05-27 00:33:32 (2 weeks ago)	[27/May/2026:01:33:31.002307 +0100] ahY72sfEp1rS3cvD8d2SlwAAAAI 192.198.126.22 36080 188.246.206.60 ... show more [27/May/2026:01:33:31.002307 +0100] ahY72sfEp1rS3cvD8d2SlwAAAAI 192.198.126.22 36080 188.246.206.60 7081 [27/May/2026:01:33:31.153855 +0100] ahY72_FPt-bpE92vJSFlbwAAAEo 192.198.126.22 36096 188.246.206.60 7081 ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-05-27 00:23:52 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 192.198.126.22 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 192.198.126.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:23:37.972918 2026] [security2:error] [pid 856:tid 856] [client 192.198.126.22:43387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ionekotis.net"] [uri "/.env"] [unique_id "ahY5ib_7Iy3V0217SBrcmgAAAA0"], referer: https://www.google.com/search?q=ionekotis.net show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-26 21:59:14 (2 weeks ago)	Auto-ban: >3000 req/min op 2026-05-26	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-05-26 18:35:59 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 192.198.126.22 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 192.198.126.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 14:35:50.546780 2026] [security2:error] [pid 10061:tid 10061] [client 192.198.126.22:43047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ads.searchenginesubmit.org"] [uri "/wp-config.php.save"] [unique_id "ahXoBiK55TqWAslDO4AGowAAAAo"], referer: https://www.google.com/search?q=www.ads.searchenginesubmit.org show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-25 11:54:18 (4 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2026-01-19 20:14:02 (4 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-06 06:37:14 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 03:12:14 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:228 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 21:09:29 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 woof	2023-01-31 23:58:45 (3 years ago)	This IP accessed a banned URI/path: /wp-json/wp/v2/posts. (ListenCaddy)	Bad Web Bot Web App Attack
🇫🇷 dusfor72	2022-12-31 03:24:38 (3 years ago)	aggressive portscan ...	Port Scan
Anonymous	2022-12-29 04:55:41 (3 years ago)	Trawling for 3rd-party CMS installations	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.74

🇱🇹 81.30.98.144

🇺🇸 150.107.38.60

🇵🇭 112.203.69.89

🇻🇳 103.78.0.229

🇭🇰 101.36.112.103

🇷🇴 92.118.39.236

🇺🇸 91.230.168.34

🇨🇳 60.174.39.82

🇨🇳 59.60.100.158

🇳🇱 45.8.17.14

🇬🇧 34.105.203.151

🇺🇸 20.127.187.7

🇳🇱 195.178.110.2

🇺🇦 194.44.140.152

🇸🇪 104.23.217.123

🇭🇰 103.210.22.74

🇻🇳 103.159.54.61

🇮🇳 103.38.219.22

🇫🇷 82.67.80.131