AS12876: Scaleway SAS
HoneyLabs honeypots recorded 664 probes from AS12876 (Scaleway SAS) in the last 7 days, originating from 21 distinct source IP addresses.
First observed 2026-11-07 17:22, most recently 2026-11-14 14:49 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-10, with 176. Its 21 addresses probed 238 distinct ports. The most probed was port 443, with 10% of the probes. One address, 51.159.64.158, sent 41% of them. 5 of the 21 busiest addresses are recognised research scanners.
Ports it targets
| Port | Probes |
|---|---|
| 443 | 65 |
| 3000 | 48 |
| 999 | 40 |
| 9004 | 32 |
| 8080 | 20 |
| 44444 | 16 |
| 9011 | 16 |
| 17159 | 16 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 51.159.64.158 | 274 | France | |
| 212.83.186.100 | 60 | France | |
| 51.159.5.6 | 49 | France | |
| 62.210.142.39 | 34 | France | |
| 62.210.142.166 | 32 | France | |
| 163.172.51.190 | 27 | France | |
| 51.159.213.98 | 20 | France | |
| 62.210.216.121 | 20 | France |
Where it comes from
| Country | Probes |
|---|---|
| France | 658 |
| Italy | 6 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 178 |
| Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1 | 60 |
| libredtail-http | 49 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 33 |
| python-requests/2.34.2 | 20 |
ASN report
ASN report
Loading