This IP address has been reported a total of
12
times from
12 distinct
sources.
51.79.204.2 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 5
reports;
Germany
with 4
reports;
Finland
with 2
reports.
The most common categories in these recent reports were:
Port Scan
11
times;
Brute-Force
1
time;
Hacking
1
time;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=51.79.204.2; proto=TCP; source_port=41988; target_port=3000
show less
Port Scan
Anonymous
2026-10-16T05:34:14.755973+02:00 vps kernel: [8492427.272693] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more2026-10-16T05:34:14.755973+02:00 vps kernel: [8492427.272693] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=51.79.204.2 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=56549 DF PROTO=TCP SPT=42764 DPT=3000 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events a ...
show moreHoneypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events across 95 source port(s). Sensor(s): Honeyaml.
show less
Port Scan
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
