191.217.233.171

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
37 reports
36 reporters · latest 3 days ago
ISP
Ace Data Centers II, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS218877
Domain Name
acedatacenter.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
37 from 36 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇮🇹 Italy 4 🇺🇸 United States of America 4
Most common categories Port Scan 25 Hacking 8 Brute-Force 4 DNS Poisoning 4 DNS Compromise 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-05 UTC.
Hacking
Anonymous
Unauthorized Repeated Recursive Lookups Domain: amp.mcbeacon.bid
DNS Poisoning
🇹🇷 Threat.live
Threat.live: Web Scan
Web App Attack
🇫🇷 EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
Port Scan
Anonymous
IP & Port Scan.
SSH Port Scan Brute-Force
🇦🇹 joe-abuse
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (53/udp); first 2026-11-05 01:04:13 UTC, last 2026-11-05 01:04:13 UTC. Reported by ipdb-security/fitzgerald.eu
Port Scan
🇨🇿 kronos
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:40 | alerts5m:46
Port Scan
🇩🇪 Roper123
Unauthorized DNS request
Brute-Force
🇳🇱 rmvanderspek
DNS flood on TCP or UDP detected.
DDoS Attack
🇮🇹 Fusty
Unauthorized attempt on (UDP on port 53). Source port: 57082 TTL: 243 Packet length: 73 53 Timestamp: 2026-11-05 01:30:46
Port Scan DNS Compromise DNS Poisoning
🇮🇹 NukeDuke
2026-11-05T01:05:48.634614+01:00 my.hidden.domain named[968267]: client @0x749608028a18 191.217.233.171#50804 (amp.mcbeacon.bid): query (cache) 'amp.mcbeacon.bid/TXT/IN' denied (allow-query-cache did not match) ...
Port Scan IoT Targeted
🇩🇪 DasDuo
Attempt on port 53 (DNS). Blocked by firewall (unsolicited inbound, no prior outbound connection).
Port Scan
🇫🇮 dnsbd.tech
nftables: Port scan (UDP:53) [srv2]
Port Scan Hacking
🇨🇭 MLC
DNS unauthorized domain query
Port Scan
🇫🇷 Petre 21_ip
2026-11-04T23:38:57.938244+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=191.217.233.171 DST=155.133.26.57 LEN=73 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=UDP SPT=55192 DPT=53 LEN=53 ...
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.5
🇹🇼 125.229.194.81
🇳🇱 109.160.32.106
🇧🇪 35.187.35.191
🇸🇬 8.219.149.222
🇫🇮 193.142.37.242
🇺🇸 50.25.34.193
🇺🇸 45.80.107.90
🇲🇽 187.190.35.163
🇵🇱 162.158.103.98
🇷🇺 89.185.70.17
🇬🇧 85.203.46.237
🇬🇧 193.163.125.24
🇺🇸 162.216.150.177
🇵🇰 101.53.235.113
🇵🇱 94.26.68.133
feedback