JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.173.48.160

190.173.48.160 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 37%: ?

37%

ISP	Telefonica de Argentina
Usage Type	Fixed Line ISP
ASN	AS22927
Hostname(s)	190-173-48-160.mrse.com.ar
Domain Name	telefonica.com.ar
Country	🇦🇷 Argentina
City	San Luis, San Luis

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.173.48.160

Whois 190.173.48.160

IP Abuse Reports for 190.173.48.160:

This IP address has been reported a total of 7 times from 6 distinct sources. 190.173.48.160 was first reported on October 6th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-10 06:44:01 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 190.173.48.160 (190-173-48-160.mrse.com.ar): 1 ... show more (mod_security) mod_security (id:225170) triggered by 190.173.48.160 (190-173-48-160.mrse.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 02:43:56.031151 2026] [security2:error] [pid 20412:tid 20412] [client 190.173.48.160:35668] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vintageamptubes.ink2wear.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vintageamptubes.ink2wear.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asnerPT_p1grbZcqXmIMTAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-10 03:55:29 (1 week ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇮🇱 Ilop	2026-10-09 21:01:05 (1 week ago)	[v5-99] Firewall dropped 12 unsolicited packet(s) proto=tcp to port(s) 22,23 from 190.173.48.160 — W ... show more [v5-99] Firewall dropped 12 unsolicited packet(s) proto=tcp to port(s) 22,23 from 190.173.48.160 — WAN scan (automated sensor) show less	Port Scan
🇮🇹 RaffOne	2026-10-09 17:53:01 (1 week ago)	SSH - Attempt to login using invalid or illegal credential	Brute-Force SSH
🇳🇱 ByeByte API	2026-10-09 09:43:13 (1 week ago)	byebyte.space auth: TCP packet to port 23 (telnet) at 2026-10-09T09:43:13Z. Source port 44358. TCP f ... show more byebyte.space auth: TCP packet to port 23 (telnet) at 2026-10-09T09:43:13Z. Source port 44358. TCP flags: SYN. Packet: 60B, TTL 48, window 65535, IP id 29025. Single packet, dropped at firewall. p0f: OS Linux 2.2.x-3.x (generic match), 15 hops, uptime 12h, link IPIP or SIT. show less	Port Scan
🇳🇱 ByeByte API	2026-10-09 09:43:13 (1 week ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 23. Single burst at 2026- ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 23. Single burst at 2026-10-09 09:43 UTC. show less	Port Scan
🇩🇪 d$JZ	2026-10-06 11:00:55 (1 week ago)	SSH scan	SSH

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.151

🇭🇰 165.154.41.205

🇳🇱 109.160.32.110

🇲🇦 105.72.38.74

🇫🇷 85.217.140.40

🇷🇺 77.40.51.90

🇨🇳 59.36.75.227

🇺🇸 52.188.184.71

🇺🇸 20.55.39.90

🇮🇳 223.185.43.36

🇺🇸 173.255.210.89

🇺🇸 162.216.149.219

🇩🇪 136.92.32.59

🇮🇩 103.149.203.56

🇨🇦 85.217.149.48

🇺🇸 20.163.3.71

🇸🇪 217.210.70.99

🇻🇳 210.245.30.140

🇦🇺 203.217.70.211

🇩🇪 167.94.145.20