JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.89.172.48

190.89.172.48 was found in our database!

This IP was reported 307 times. Confidence of Abuse is 0%: ?

ISP	COOPERATIVA DE OBRAS Y SERVICIOS PUBLICOS Y VIVIENDAS DE BIGAND LTDA
Usage Type	Fixed Line ISP
ASN	AS272039
Domain Name	dat1.net.ar
Country	🇦🇷 Argentina
City	Villa Mugueta, Santa Fe

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.89.172.48

Whois 190.89.172.48

IP Abuse Reports for 190.89.172.48:

This IP address has been reported a total of 307 times from 187 distinct sources. 190.89.172.48 was first reported on May 17th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-05 06:00:00 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=85, sources=1)	Hacking Brute-Force SSH
🇿🇦 agentics	2026-04-01 02:16:08 (2 months ago)	190.89.172.48 report :	DDoS Attack FTP Brute-Force Port Scan Hacking Spoofing Brute-Force Exploited Host
🇧🇷 helix	2026-03-25 06:14:43 (2 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇪🇸 helix	2026-03-24 05:14:21 (2 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-03-13 03:20:32 (3 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-03-12 02:17:19 (3 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-11 20:12:00 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇸🇬 sh97	2026-03-11 01:11:45 (3 months ago)	rooted: SSH Brute Force from 190.89.172.48 at 2026-03-11 06:41:45 IST	Brute-Force SSH
🇺🇸 Deltron3030	2026-03-10 06:55:30 (3 months ago)	SSH brute-force attempt from 190.89.172.48 blocked by .	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-03-10 02:35:35 (3 months ago)		Brute-Force Web App Attack
🇫🇷 glmx	2026-03-09 23:48:25 (3 months ago)	Repeated SSH brute-force attempts detected. Automatically banned by Fail2Ban.	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-09 20:11:58 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇱🇺 SiteXL	2026-03-09 16:36:03 (3 months ago)	{"event":{"DateTime":"2026-03-09T16:27:00Z","RemoteAddr":"190.89.172.48:57934","Protocol":"SSH","Com ... show more {"event":{"DateTime":"2026-03-09T16:27:00Z","RemoteAddr":"190.89.172.48:57934","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"1f694a50-c06c-4e03-a25f-205c935dbd2a","Environ":"","User":"sipv","Password":"1234","Client":"SSH-2.0-libssh_0.11.1","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"190.89.172.48","SourcePort":"57934","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2026-03-09T16:27:01Z","RemoteAddr":"190.89.172.48:57934","Protocol":"SSH","Command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","CommandOutput":"Permission denied.","Status":"Start","Msg":"SSH Raw Command","ID":"b7461196-6226-453f-9126-5fd4dd74445e","Environ":"","User":"sipv","Password":"","Client":"","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","Reque show less	Hacking Port Scan Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-09 15:58:56 (3 months ago)	(sshd) Failed SSH login from 190.89.172.48 (AR/Argentina/-): 5 in the last 3600 secs; Ports: ; Dire ... show more (sshd) Failed SSH login from 190.89.172.48 (AR/Argentina/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Mar 9 10:50:11 14506 sshd[15293]: Invalid user angga from 190.89.172.48 port 48884 Mar 9 10:50:14 14506 sshd[15293]: Failed password for invalid user angga from 190.89.172.48 port 48884 ssh2 Mar 9 10:55:18 14506 sshd[16107]: Did not receive identification string from 190.89.172.48 port 34816 Mar 9 10:58:35 14506 sshd[16684]: Invalid user sambauser from 190.89.172.48 port 59960 Mar 9 10:58:37 14506 sshd[16684]: Failed password for invalid user sambauser from 190.89.172.48 port 59960 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-09 15:22:18 (3 months ago)	(sshd) Failed SSH login from 190.89.172.48 (AR/Argentina/-): 5 in the last 3600 secs; Ports: ; Dire ... show more (sshd) Failed SSH login from 190.89.172.48 (AR/Argentina/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Mar 9 10:11:06 15187 sshd[2618]: Invalid user support from 190.89.172.48 port 56252 Mar 9 10:11:08 15187 sshd[2618]: Failed password for invalid user support from 190.89.172.48 port 56252 ssh2 Mar 9 10:15:22 15187 sshd[3218]: Invalid user user from 190.89.172.48 port 59844 Mar 9 10:15:24 15187 sshd[3218]: Failed password for invalid user user from 190.89.172.48 port 59844 ssh2 Mar 9 10:22:12 15187 sshd[4556]: Invalid user student4 from 190.89.172.48 port 48486 show less	Brute-Force SSH

Showing 1 to 15 of 307 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.152

🇺🇸 2a03:2880:10ff:9::

🇦🇺 2400:8280:2:104:9999::245

🇩🇪 213.209.159.226

🇺🇸 196.51.121.159

🇧🇷 191.235.101.1

🇮🇳 150.241.245.69

🇺🇸 13.83.162.35

🇺🇸 3.101.45.247

🇺🇸 2a03:2880:10ff:8::

🇸🇬 203.117.127.148

🇭🇰 199.45.154.179

🇲🇽 187.191.48.23

🇲🇾 180.74.69.89

🇸🇬 114.119.139.86

🇷🇺 90.188.246.85

🇺🇸 45.42.88.54

🇺🇸 3.90.162.24

🇺🇸 2a03:2880:10ff:73::

🇧🇷 189.51.43.54