JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.236.28.220

45.236.28.220 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 18%: ?

18%

ISP	NERVICOM, C.A.
Usage Type	Fixed Line ISP
ASN	AS266809
Hostname(s)	nv28.220.nervicom.net
Domain Name	nervicom.net
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	Turmero, Aragua

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.236.28.220

Whois 45.236.28.220

IP Abuse Reports for 45.236.28.220:

This IP address has been reported a total of 15 times from 7 distinct sources. 45.236.28.220 was first reported on April 6th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-13 11:42:20 (4 days ago)	(mod_security) mod_security (id:210740) triggered by 45.236.28.220 (nv28.220.nervicom.net): 1 in the ... show more (mod_security) mod_security (id:210740) triggered by 45.236.28.220 (nv28.220.nervicom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 07:42:14.962863 2026] [security2:error] [pid 21787:tid 21787] [client 45.236.28.220:44940] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|weirdlovemakers.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "weirdlovemakers.com"] [uri "/text_home_fires_yearning.html"] [unique_id "as4ZFlChj9MGmM4WRE8S-gAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 00:01:56 (3 weeks ago)	(mod_security) mod_security (id:210740) triggered by 45.236.28.220 (nv28.220.nervicom.net): 1 in the ... show more (mod_security) mod_security (id:210740) triggered by 45.236.28.220 (nv28.220.nervicom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 20:01:40.157480 2026] [security2:error] [pid 15939:tid 15939] [client 45.236.28.220:39834] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|thenewplantation.org\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "thenewplantation.org"] [uri "/403.html"] [unique_id "arW55ImHyi_0EYlJNM3KOwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 22:09:35 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 03:05:11 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 01:01:04 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-11 21:05:51 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 05:38:18 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A765&f%5B1%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B324%5D=324&page=4 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-04 02:12:53 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-27 06:16:00 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 07:44:47 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-23 13:16:53 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇫🇷 Sklurk	2026-08-11 02:43:00 (2 months ago)	Web App Attack	Web App Attack
🇩🇪 Vegascosmetics	2026-06-11 08:47:36 (4 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 User9684	2023-04-15 07:48:01 (3 years ago)	Attempt to DDoS a site	DDoS Attack
🇮🇸 ISPLtd	2023-04-06 10:48:31 (3 years ago)	Apr 6 07:37:32 SRC=45.236.28.220 PROTO=TCP SPT=42359 DPT=25565 SYN Apr 6 07:37:33 SRC=45.236.28.22 ... show more Apr 6 07:37:32 SRC=45.236.28.220 PROTO=TCP SPT=42359 DPT=25565 SYN Apr 6 07:37:33 SRC=45.236.28.220 PROTO=TCP SPT=42359 DPT=25565 SYN Apr 6 07:37:35 SRC=45.236.28.220 PROTO=TCP SPT=42359 DPT=25565 ... show less	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.153.135

🇻🇳 221.133.26.3

🇬🇧 86.38.187.149

🇺🇸 3.129.187.38

🇲🇽 177.245.240.132

🇨🇳 125.69.76.148

🇪🇸 113.30.149.218

🇰🇿 95.58.255.251

🇬🇧 86.38.187.128

🇬🇧 86.38.187.13

🇳🇱 77.91.71.10

🇨🇳 60.188.112.159

🇭🇷 188.252.198.241

🇺🇸 173.18.106.54

🇭🇰 156.239.236.204

🇨🇳 124.237.60.6

🇨🇳 117.50.208.104

🇰🇷 112.187.204.188

🇭🇰 94.190.229.193

🇨🇭 91.208.173.162