JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.138.193.190

217.138.193.190 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 30%: ?

30%

ISP	M247 Ltd Dubai
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇦🇪 United Arab Emirates
City	Dubai, Dubai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.138.193.190

Whois 217.138.193.190

IP Abuse Reports for 217.138.193.190:

This IP address has been reported a total of 67 times from 39 distinct sources. 217.138.193.190 was first reported on November 25th 2020, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-25 23:21:21 (4 weeks ago)	Portscan: TCP/22, TCP/6380, TCP/4000, TCP/5001, TCP/10080, TCP/23, TCP/18081, TCP/9393, TCP/6081 (2x ... show more Portscan: TCP/22, TCP/6380, TCP/4000, TCP/5001, TCP/10080, TCP/23, TCP/18081, TCP/9393, TCP/6081 (2x), TCP/9092, TCP/587, TCP/995, TCP/49153, TCP/8983, TCP/9100, TCP/5173, TCP/50030, TCP/4568, TCP/8883 show less	Port Scan
🇺🇸 mutebot.net	2026-05-25 17:15:24 (4 weeks ago)	SRC=217.138.193.190, PROTO=TCP, SPT=60103, DPT=8008 SRC=217.138.193.190, PROTO=TCP, SPT=60882, DPT=2 ... show more SRC=217.138.193.190, PROTO=TCP, SPT=60103, DPT=8008 SRC=217.138.193.190, PROTO=TCP, SPT=60882, DPT=27017 SRC=217.138.193.190, PROTO=TCP, SPT=41539, DPT=5900 SRC=217.138.193.190, PROTO=TCP, SPT=38053, DPT=8291 SRC=217.138.193.190, PROTO=TCP, SPT=60103, DPT=8008 show less	Port Scan
🇺🇸 Gabriel Camargo	2026-05-19 23:59:34 (1 month ago)	217.138.193.190 - - [19/May/2026:18:57:38 -0500] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Lin ... show more 217.138.193.190 - - [19/May/2026:18:57:38 -0500] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 217.138.193.190 - - [19/May/2026:18:57:39 -0500] "GET /favicon.ico HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 217.138.193.190 - - [19/May/2026:18:59:34 -0500] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
Anonymous	2026-05-19 17:27:57 (1 month ago)	May 19 13:27:53 localhost kernel: [107557017.193475] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 19 13:27:53 localhost kernel: [107557017.193475] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=217.138.193.190 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0xA0 TTL=36 ID=0 DF PROTO=TCP SPT=33272 DPT=18081 SEQ=3957268509 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A96C5AE650000000001030307) May 19 13:27:53 localhost kernel: [107557017.300413] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=217.138.193.190 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0xA0 TTL=45 ID=0 DF PROTO=TCP SPT=47027 DPT=135 SEQ=3087323685 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A96C5AE650000000001030307) May 19 13:27:53 localhost kernel: [107557017.311491] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=217.138.193.190 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0xA0 TTL=43 ID=0 DF PROTO=TCP SPT=39061 DPT=5500 SEQ=114131949 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A96C5AE65000000000103030 show less	Port Scan
🇮🇳 Mr.Singh	2026-05-15 03:30:21 (1 month ago)	NFT blocked 217.138.193.190 after 3 rejections on 15-May-2026.	Port Scan Brute-Force
🇨🇭 blinx	2026-05-15 01:03:34 (1 month ago)	Suspicious activity detected by Modsecurity	Web Spam Port Scan Hacking Bad Web Bot Web App Attack
🇫🇷 sthoyer.de	2026-05-15 00:13:57 (1 month ago)	May 15 02:13:46 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more May 15 02:13:46 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=217.138.193.190 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=0 DF PROTO=TCP SPT=53710 DPT=995 WINDOW=65535 RES=0x00 SYN URGP=0 May 15 02:13:50 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=217.138.193.190 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=0 DF PROTO=TCP SPT=53710 DPT=995 WINDOW=65535 RES=0x00 SYN URGP=0 May 15 02:13:53 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=217.138.193.190 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=0 DF PROTO=TCP SPT=51687 DPT=8009 WINDOW=65535 RES=0x00 SYN URGP=0 May 15 02:13:53 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=217.138.193.190 DST=173.212.223.67 LEN=76 TOS=0x00 PREC=0x00 TTL=47 ID=11572 DF PROTO=UDP SPT=53513 DPT=123 LEN=56 May 1 ... show less	Port Scan
🇩🇪 iNetWorker	2026-05-15 00:11:34 (1 month ago)	trying to access non-authorized port	Port Scan
🇧🇾 sashan	2026-05-14 20:41:08 (1 month ago)	2026-05-14T23:40:36.721368+03:00 gate kernel: nftables: JAIL-SQL IN=wan OUT= MAC= SRC=217.138.193.19 ... show more 2026-05-14T23:40:36.721368+03:00 gate kernel: nftables: JAIL-SQL IN=wan OUT= MAC= SRC=217.138.193.190 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=0 DF PROTO=TCP SPT=58608 DPT=3306 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇯🇵 demonsword	2026-05-09 20:27:51 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: login.live.com:443 show less	Open Proxy Port Scan
🇫🇷 Kraften	2026-05-02 16:34:58 (1 month ago)	Dovecot imap-login ...	DDoS Attack Brute-Force
🇫🇮 Shaik Sai Meera	2026-03-26 10:55:11 (2 months ago)	OSSEC: MySQL unauthenticated aborted connection attack detection	FTP Brute-Force Port Scan SSH
🇩🇪 thelema	2026-03-15 19:34:25 (3 months ago)	Honeypot hit on port 3389	Port Scan Brute-Force
🇳🇱 i-turnradio.nl	2026-03-15 11:53:10 (3 months ago)	2026-03-15 12:53:10 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇬🇧 AvonleaConsulting	2026-03-15 10:37:02 (3 months ago)	Brute force attack to crack POP password (port 110)	Email Spam Brute-Force

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.90

🇺🇸 143.198.225.197

🇳🇱 91.92.40.12

🇺🇸 2607:f8b0:4004:c25::123

🇭🇰 161.81.122.27

🇺🇸 147.185.132.63

🇺🇸 66.132.195.36

🇮🇳 52.102.196.22

🇺🇸 209.87.169.168

🇸🇬 103.189.235.176

🇱🇹 45.227.254.170

🇻🇳 203.205.37.233

🇹🇭 203.154.158.195

🇳🇱 195.178.110.228

🇫🇮 178.20.210.152

🇰🇷 121.188.193.96

🇨🇳 111.35.7.46

🇷🇴 80.94.92.120

🇺🇸 24.131.167.190

🇹🇷 213.43.32.99