217.197.83.193

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
38% Elevated
76 reports
61 reporters · latest 3 weeks ago
ISP
Lehrter Str. 53
Usage Type
Data Center/Web Hosting/Transit
ASN
AS29670
Hostname(s)
freifunk-gw01.in-berlin.de
Domain Name
in-berlin.de
Country
🇩🇪 Germany
City
Berlin, State of Berlin
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
76 from 61 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇦🇺 Australia 2 🇫🇷 France 2
Most common categories Port Scan 8 Hacking 7 Web App Attack 4 Bad Web Bot 3 Email Spam 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Triggered: repeated knocking on closed ports.
Port Scan
🇦🇺 crispi
Port scan from 217.197.83.193
Port Scan
🇨🇦 DRI
Unsolicited TCP traffic on Honeypot, srcport=37394 dstport=8080
Port Scan Hacking
🇦🇹 piqwjdas
OWASP CRS blocked web attack: Found User-Agent associated with security scanner (rule 913100) | Inbound Anomaly Score Exceeded (Total Score: 5) (rule 949110). Method: GET, URI: /.
Web App Attack
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 8080/HTTP-proxy | Proto: TCP(1) | Flags: all SYN | TTL: 56 | Len: 60B | Win: 64240(1) | rDNS: freifunk-gw01.in-berlin.de | F2B/ufw-honeypot@2026-10-17T23:36:46Z
Port Scan Hacking
🇩🇪 Ano_Nym
CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/http-bad-user-agent
Web App Attack
🇦🇺 Bay13
CrowdSec:crowdsecurity/http-bad-user-agent
Bad Web Bot
🇳🇱 globcom
Spam / Spoofing
Email Spam Spoofing
🇩🇪 Starburst SysOp Team
Found User-Agent associated with security scanner. Matched phrase "nmap" at REQUEST_HEADERS:User-Agent. (913100-nue6-1)
Hacking Bad Web Bot
🇵🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 53 | Len: 60B | Win: 64240(1) | rDNS: freifunk-gw01.in-berlin.de | F2B/ufw-honeypot@2026-10-14T06:09:49Z
Port Scan Hacking
🇫🇷 vtchost.com
portscan 80/443 on honeypot system ...
Port Scan
🇺🇸 SuperCores Hosting
[2026-10-05 01:37:15.254483] TELNET/8080 Unautorized connection, Suspicious Mirai Botnet.
IoT Targeted Brute-Force Hacking Port Scan DDoS Attack
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 NMAP 👨‍💻).
Hacking Web App Attack
🇩🇪 Da_tschek
Port scanning
Port Scan Hacking
🇩🇪 MaxMeier
Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 211.185.111.174
🇬🇧 193.163.125.193
🇳🇱 176.65.151.21
🇺🇸 98.116.95.250
🇫🇷 75.119.147.127
🇳🇱 45.148.10.151
🇺🇸 138.68.31.127
🇺🇸 136.144.42.46
🇺🇸 136.144.35.228
🇰🇷 125.130.102.172
🇺🇸 63.135.161.178
🇺🇸 35.93.147.177
🇧🇪 34.79.178.219
🇺🇸 195.181.162.186
🇳🇱 195.178.110.30
🇵🇦 186.148.104.107
🇺🇸 129.121.101.28
🇸🇬 104.22.66.47
🇺🇸 66.132.159.39
🇨🇳 60.166.82.186
feedback