JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.220.28.220

190.220.28.220 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 16%: ?

16%

ISP	GUABI S.A.S.
Usage Type	Fixed Line ISP
ASN	AS11664
Hostname(s)	host220.190-220-28.telmex.net.ar
Domain Name	guabi.com.ar
Country	🇦🇷 Argentina
City	Cordoba, Cordoba

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.220.28.220

Whois 190.220.28.220

IP Abuse Reports for 190.220.28.220:

This IP address has been reported a total of 3 times from 3 distinct sources. 190.220.28.220 was first reported on August 19th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-28 14:24:15 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 190.220.28.220 (host220.190-220-28.telmex.net.a ... show more (mod_security) mod_security (id:210350) triggered by 190.220.28.220 (host220.190-220-28.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 10:24:06.668537 2026] [security2:error] [pid 10693:tid 10693] [client 190.220.28.220:55874] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|virttee.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "virttee.com"] [uri "/"] [unique_id "arp4hupZZSJJR0B5iMBNDwAAABo"], referer: https://bulkbacklinkreport.site/dir/premium-link-building-226631 show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Zkillu	2026-08-19 22:29:08 (1 month ago)	UDP flood (DDoS) vs AS215599: 24 pkts / 0.03 MB to UDP 80/8443 across 12 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 24 pkts / 0.03 MB to UDP 80/8443 across 12 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:29:08 (1 month ago)	UDP flood (DDoS) vs AS215599: 24 pkts / 0.03 MB to UDP 80/8443 across 12 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 24 pkts / 0.03 MB to UDP 80/8443 across 12 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 77.239.124.33

🇰🇷 211.223.107.86

🇧🇪 198.235.24.166

🇬🇧 195.140.214.24

🇺🇸 151.240.104.186

🇷🇴 92.118.39.14

🇺🇸 69.63.184.29

🇧🇪 198.235.24.241

🇺🇸 192.9.228.120

🇮🇳 103.17.80.218

🇰🇿 85.193.103.159

🇺🇸 66.132.195.30

🇺🇸 20.169.50.152

🇻🇳 14.225.220.240

🇺🇿 213.230.87.4

🇺🇸 205.210.31.89

🇦🇷 200.81.170.119

🇳🇱 193.176.31.226

🇰🇷 121.155.247.19

🇨🇮 102.67.208.5