AbuseIPDB » 192.198.126.76
192.198.126.76
This IP was reported 10 times. Confidence of
Abuse
is 0% : ?
ISP
Server Mania Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS55286
Domain Name
servermania.com
Country
🇺🇸
United States of America
City
El Segundo, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 192.198.126.76 :
This IP address has been reported a total of
10
times from
6 distinct
sources.
192.198.126.76 was first reported on
June 28th 2022 , and the most recent report was
9 months ago
Old Reports:
The most recent abuse report for this IP address is from
9 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2025-09-01 00:58:21
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 192.198.126.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 192.198.126.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 20:58:10.483620 2025] [security2:error] [pid 4167008:tid 4167045] [client 192.198.126.76:35981] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kettlehill.com|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kettlehill.com"] [uri "/.ssh/known_hosts.old"] [unique_id "aLTvog6DfZQKU24eXUwU_gAAAEQ"], referer: http://www.kettlehill.com/.ssh/known_hosts.old
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
raramos
2025-08-07 19:00:07
(10 months ago)
[SMB remote code execution attempt: port tcp/445]
in blocklist.de:'listed [pop3]'
in SpamCop:'listed ...
show more
[SMB remote code execution attempt: port tcp/445]
in blocklist.de:'listed [pop3]'
in SpamCop:'listed'
in sorbs:'listed [web], [spam]'
in Unsubscore:'listed'
*(RWIN=8192)(04:10)
show less
Web Spam
Email Spam
Port Scan
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-06-01 21:47:07
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 192.198.126.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 192.198.126.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 01 17:46:59.834038 2025] [security2:error] [pid 3314645:tid 3314645] [client 192.198.126.76:53151] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nbcnewsradio.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nbcnewsradio.com"] [uri "/....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\windows\\\\win.ini"] [unique_id "aDzKU98oe8oOLFuEKIIj5QAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-01 09:04:30
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 192.198.126.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 192.198.126.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 01 05:04:21.332417 2025] [security2:error] [pid 2863390:tid 2863512] [client 192.198.126.76:56037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.staging.kettlehill.com"] [uri "/wp-config.php.bak"] [unique_id "aDwXlYmk0cNjkOYTn0LezwAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2023-01-21 15:11:01
(3 years ago)
Form spam
Web Spam
🇺🇸
oncord
2023-01-20 14:27:44
(3 years ago)
Form spam
Web Spam
🇦🇺
oncord
2022-12-22 05:46:45
(3 years ago)
Form spam
Web Spam
2022-12-13 21:31:09
(3 years ago)
Trawling for Open Source CMS installs
Hacking
Brute-Force
🇨🇦
Buster
2022-09-30 11:54:24
(3 years ago)
DDOS Attack attempts blocked: Perm Blocked Very Bad ASNs & countries: Tries to attack on 104.227.100 ...
show more
DDOS Attack attempts blocked: Perm Blocked Very Bad ASNs & countries: Tries to attack on 104.227.100.116 185.213.242.89 95.164.235.56 45.94.47.254 185.126.65.242 192.198.126.76
show less
DDoS Attack
Hacking
Brute-Force
Web App Attack
2022-06-28 06:41:23
(3 years ago)
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: