JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.196.126.117

168.196.126.117 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 25%: ?

25%

ISP	COMCAST-SRL
Usage Type	Fixed Line ISP
ASN	AS264821
Hostname(s)	117-126-196-168-core.comcast-srl.com
Domain Name	comcast-sa.com
Country	🇩🇴 Dominican Republic
City	Villa Bisono, Santiago Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.196.126.117

Whois 168.196.126.117

IP Abuse Reports for 168.196.126.117:

This IP address has been reported a total of 10 times from 7 distinct sources. 168.196.126.117 was first reported on February 25th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-19 15:21:44 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 vtchost.com	2026-06-19 13:50:33 (2 weeks ago)	Jun 19 15:50:33 vtchost kernel: [23349.799217] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Jun 19 15:50:33 vtchost kernel: [23349.799217] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=168.196.126.117 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=30008 DF PROTO=TCP SPT=58631 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-08 15:41:41 (4 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇮🇩 hermawan	2026-05-29 01:06:17 (1 month ago)	[Fri May 29 08:06:17.102429 2026] [security2:error] [pid 1180263:tid 139852137866944] [client 168.19 ... show more [Fri May 29 08:06:17.102429 2026] [security2:error] [pid 1180263:tid 139852137866944] [client 168.196.126.117:46988] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/2.0 Request URI RAW = /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa Request Basename = 555558585-poster-antisipasi-gempa"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWA ... show less	Email Spam Hacking
🇬🇧 PeravixGroup	2026-05-19 20:15:35 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-12 00:00:51 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/168.196.126.117	SSH
🇦🇹 urnilxfgbez	2026-05-11 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-05-11 18:18:27 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 IP Analyzer	2026-04-01 19:30:32 (3 months ago)	Unauthorized connection attempt from IP address 168.196.126.117 on Port 445(SMB)	Port Scan
🇫🇷 vtchost.com	2026-02-25 06:09:21 (4 months ago)	bad user agent - known bad bot or invalid agent - possible botnet ...	Bad Web Bot

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.69.161.69

🇧🇷 107.149.152.67

🇳🇱 45.198.224.5

10.10.10.10

🇷🇴 2.57.122.209

🇲🇦 196.92.7.247

🇲🇽 187.189.123.27

🇺🇸 162.216.150.115

🇰🇪 102.210.149.236

🇿🇦 102.64.33.132

🇺🇸 68.169.41.107

🇺🇸 66.132.172.127

🇨🇳 60.18.139.82

🇯🇵 20.89.111.206

🇺🇸 172.238.58.159

🇺🇸 165.154.182.221

🇱🇺 46.151.182.201

🇳🇱 45.153.34.112

🇸🇬 43.160.208.253

🇸🇬 23.111.14.187