AS213412: ONYPHE SAS
HoneyLabs honeypots recorded 42,135 probes from AS213412 (ONYPHE SAS) in the last 7 days, originating from 1,024 distinct source IP addresses.
First observed 2026-11-07 17:16, most recently 2026-11-14 17:16 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-13, with 7,176. Its 1,024 addresses probed 5,042 distinct ports. No port took more than 1% of the probes. No single address sent more than 0% of them. 25 of the 25 busiest addresses are recognised research scanners.
Ports it targets
| Port | Probes |
|---|---|
| 554 | 48 |
| 53 | 48 |
| 5432 | 47 |
| 9401 | 36 |
| 1433 | 36 |
| 51005 | 34 |
| 5357 | 32 |
| 8088 | 32 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 195.184.76.122 | 92 | United States | |
| 91.196.152.215 | 88 | France | |
| 195.184.76.78 | 84 | United States | |
| 91.231.89.244 | 84 | France | |
| 91.196.152.64 | 83 | France | |
| 91.196.152.60 | 83 | France | |
| 91.230.168.44 | 83 | United States | |
| 91.196.152.59 | 82 | France |
Where it comes from
| Country | Probes |
|---|---|
| France | 20,906 |
| United States | 20,872 |
| China | 357 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 41,682 |
| kubectl/v1.15.2 (linux/amd64) kubernetes/f627830 | 9 |
ASN report
ASN report
Loading