5.196.240.2
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- OVH SAS
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS16276
- Domain Name
- ovh.net
- Country
- 🇫🇷 France
- City
- Paris, Ile-de-France
Abuse Reports
Total reports
10 from
9 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇸🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 118 | Len: 52B | Win: 64240(1) | rDNS: ip2.ip-5-196-240.eu | F2B/ufw-honeypot@2026-09-21T21:13:39Z
|
Port Scan Hacking | |
| Anonymous |
Blocked by firewall on hugin [1433/tcp] | Rule: UFW | SPT: 50614 | TTL: 119 | LEN: 52 | TOS: 0x02 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 azminawwar |
[5.196.240.2] triggered by honeypot on port [1433], Timestamp [2026-09-21T18:12:44Z](no payload)
|
Port Scan Hacking | |
| 🇺🇸 azminawwar |
[5.196.240.2] triggered by honeypot on port [1433], Timestamp [2026-09-21T13:39:21Z](no payload)
|
Port Scan Hacking | |
| 🇩🇪 DasDuo |
Attempt on port 1433 (MSSQL) - potential unauthorized database access attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 HamSammich |
Automated sensor: 1602 MSSQL connection/probe attempts over the last 24h (latest 2026-09-21T08:00Z).
|
Hacking Brute-Force | |
| 🇩🇪 Kejult |
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 9640 authentication events observed across 8154 source port(s); target port(s): 1433.
|
Brute-Force | |
| Anonymous |
denied traffic to a honeypot network. destination port 445.
|
Port Scan Hacking | |
| 🇺🇸 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - corp
|
Port Scan Hacking | |
| 🇮🇳 Mr.Singh |
NFT blocked 5.196.240.2 after 3 rejections on 11-Sep-2026.
|
Port Scan Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown