51.83.187.123

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
78 reports
67 reporters · latest 1 hour ago
ISP
OVH Sp. z o. o.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16276
Hostname(s)
vps-9ec92588.vps.ovh.net
Domain Name
ovh.net
Country
🇵🇱 Poland
City
Warsaw, Mazovia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
78 from 67 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 20 🇩🇪 Germany 15 🇺🇸 United States of America 13
Most common categories Port Scan 63 Hacking 23 Brute-Force 16 SSH 8 Exploited Host 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/6379 (Redis); 12 application-level events across 3 source port(s). Sensor(s): Redishoneypot.
Port Scan
🇺🇸 etu brutus
51.83.187.123 Blocked by [Attack Vector List] ...
Hacking Brute-Force Exploited Host
🇩🇪 phil2k
fail2ban:recidive:2026-11-06 07:58:21,343 fail2ban.actions [4061749]: NOTICE [firewall] Ban 51.83.187.123 2026-11-06 13:31:23,418 fail2ban.actions [4061749]: NOTICE [firewall] Ban 51.83.187.123
DDoS Attack Port Scan Brute-Force
🇬🇧 Andrew
Blocked by UFW (TCP on port 6379). Source port: 45779 TTL: 239 Packet length: 40 TOS: 0x00 This report (for 51.83.187.123) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇪🇸 raiolanetworks.com
Honeypot detection: Redis attack. 3 events observed. Reported automatically from a honeypot sensor.
Hacking
🇨🇦 Sakusen
Redis (TCP/6379): 6 commands
Port Scan
🇫🇷 uthul
T-Pot honeypot: 173 hits on ports [6379, 6380, 6381, 16379] (automated)
Port Scan
🇫🇷 Zikmadol
Trapline honeypot: Redis exploitation. Feed: https://github.com/Zikmadol/trapline-ioc
Hacking
🇫🇷 thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 6379 (Redis) on a host running no such service. Automated port-scan detection at 2026-11-06T07:59:23Z.
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: Unauthorized traffic (6 bytes of payload); 6381 [1] TCP
Port Scan
🇺🇸 HamSammich
Automated sensor: 1 Redis connection/probe attempts over the last 24h (latest 2026-11-06T07:56Z).
Port Scan Hacking
🇬🇧 sandra361
Port scan detected: 14 attempts across 2 ports (6379, 16379). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=51.83.187.123 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=50762 DF PROTO=TCP SPT=50794 DPT=6379 WINDOW=64240 RES=0x00 ACK FIN URGP=0
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 90 application-level events across 4 target ports and 51 source port(s). Ports: 6379/Redis, 16379/service, 6381/service, 6380/service. Sensors: Redishoneypot, Honeytrap.
Port Scan
🇩🇪 ValtonTahiri
Port Scan
🇫🇷 zulzeen
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Database/Cache Attack)
Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 185.247.137.76
🇻🇳 171.237.179.159
🇮🇳 94.46.39.159
🇺🇸 45.56.84.110
🇨🇳 221.229.218.50
🇧🇷 190.103.150.25
🇲🇲 185.133.212.238
🇨🇳 183.241.252.239
🇺🇸 136.119.35.229
🇺🇸 136.71.17.13
🇺🇸 66.132.195.124
🇦🇷 45.4.163.211
🇨🇳 39.64.106.213
🇩🇪 34.185.251.156
🇺🇦 213.5.193.42
🇺🇸 199.165.159.84
🇺🇦 188.163.81.220
🇧🇾 178.120.174.148
🇮🇹 151.95.23.125
🇳🇱 109.160.32.32
feedback