AS200651: FlokiNET ehf
HoneyLabs honeypots recorded 85 probes from AS200651 (FlokiNET ehf) in the last 7 days, originating from 3 distinct source IP addresses.
First observed 2026-11-05 20:45, most recently 2026-11-12 06:32 (UTC).
What the sensors show
Probes arrived on 5 of the 7 days in this window. The busiest day was 2026-11-05, with 49. Its 3 addresses probed 29 distinct ports. The most probed was port 3000, with 32% of the probes. One address, 178.17.240.71, sent 58% of them.
Ports it targets
| Port | Probes |
|---|---|
| 3000 | 27 |
| 8080 | 5 |
| 8443 | 5 |
| 2222 | 3 |
| 5432 | 3 |
| 3389 | 3 |
| 1883 | 2 |
| 1433 | 2 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 178.17.240.71 | 49 | Iceland | |
| 185.146.234.178 | 27 | Iceland | |
| 185.100.87.136 | 9 | Romania |
Where it comes from
| Country | Probes |
|---|---|
| Iceland | 76 |
| Romania | 9 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; GodsEyeNet/1.0; +https://scanner.syncinity.com/) | 42 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 22 |
| Go-http-client/1.1 | 5 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) | 3 |
ASN report
ASN report
Loading