5.40.193.243

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
66% Elevated
22 reports
19 reporters · latest 2 weeks ago
ISP
VODAFONE ONO, S.A.
Usage Type
Fixed Line ISP
ASN
AS6739
Hostname(s)
5.40.193.243.static.user.ono.com
Domain Name
vodafone.es
Country
🇪🇸 Spain
City
Toledo, Castille-La Mancha
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇫🇷 France 5 🇺🇸 United States of America 3
Most common categories Port Scan 16 Hacking 6 Brute-Force 4 Web App Attack 3 Bad Web Bot 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇫🇷 uthul
T-Pot honeypot: 1 hits on ports [44299] (automated)
Port Scan
🇺🇸 anon333
Hacker syslog review 1792773258
Hacking
🇦🇺 paulshipley.com.au
support.paulshipley.com.au:443 5.40.193.243 - - [23/Oct/2026:17:24:04 +1100] "GET /wp/wp-login.php HTTP/1.1" 404 27458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" ...
Web App Attack
🇦🇺 sel
UFW blocked 1 connection attempts. Ports targeted:
Port Scan Bad Web Bot
Anonymous
65487/udp (1 or more attempts)
Port Scan
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇧🇷 SOC Blue Team
IPs get by Hunting on SIEM
Phishing Web Spam Port Scan Hacking
🇵🇱 MatStef132
MatShield L7: blocked on fivevault.net (suspicious behaviour)
DDoS Attack
🇫🇷 uthul
T-Pot honeypot: 1 hits on ports [4284] (automated)
Port Scan
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 54 | Len: 60B | Win: 65535(1) | rDNS: 5.40.193.243.static.user.ono.com | F2B/ufw-honeypot@2026-10-21T12:52:51Z
Port Scan Hacking
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇫🇷 Petre 21_ip
2026-10-21T00:20:52.156936+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=5.40.193.243 DST=155.133.26.57 LEN=1387 TOS=0x00 PREC=0x00 TTL=53 ID=25564 DF PROTO=UDP SPT=56152 DPT=15803 LEN=1367 ...
Port Scan
🇩🇪 LRob
Brute-Force Web App Attack
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=49499 dstport=28617
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 202.51.214.99
🇳🇱 200.138.46.233
🇧🇷 187.94.255.193
🇺🇸 185.61.223.40
🇺🇸 57.141.0.6
🇳🇱 192.253.248.223
🇨🇱 186.104.250.31
🇺🇸 136.117.6.231
🇳🇱 93.123.109.230
🇷🇺 89.109.4.236
🇨🇦 85.217.149.9
🇧🇬 79.124.58.102
🇹🇳 197.240.11.16
🇫🇷 146.70.194.220
🇨🇦 137.175.150.72
🇨🇳 116.140.197.125
🇰🇪 102.209.76.137
🇺🇸 66.132.172.190
🇵🇹 2.81.243.135
feedback