IP address 5.187.97.40 has been flagged in 334 abuse reports across 24 independent threat intelligence sources, resulting in a threat score of 100.0/100 (critical risk). The primary activity associated with this IP is aggregated threat, along with aggressive scanner, attacks, brute force, bruteforce, compromised, malware c2, rdp bruteforce, scanning, severe abuse, ssh-bruteforce, ssh brute force, ssh bruteforce, suspicious activity, web attack, web brute force.
This IP is geolocated in Guadeloupe (Les Abymes) and belongs to the network Canal + Telecom SAS (AS21351). Reports span from 2025-03-01 to 2026-03-31.
Assessment: With 334 abuse reports, 5.187.97.40 shows persistent malicious activity that has been flagged by multiple threat intelligence feeds. The IP has been observed conducting automated SSH login attempts against internet-facing servers, a technique commonly used to gain unauthorized access to systems.