AS51167: Contabo GmbH
HoneyLabs honeypots recorded 937 probes from AS51167 (Contabo GmbH) in the last 7 days, originating from 75 distinct source IP addresses.
First observed 2026-11-08 09:12, most recently 2026-11-15 08:24 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-12, with 240. Its 75 addresses probed 53 distinct ports. The most probed was port 3000, with 41% of the probes. No single address sent more than 13% of them. None of the 25 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 3000 | 387 |
| 22 | 47 |
| 3001 | 32 |
| 5173 | 31 |
| 4200 | 27 |
| 5174 | 27 |
| 5175 | 26 |
| 5000 | 24 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 45.140.185.109 | 121 | France | |
| 62.169.26.141 | 108 | France | |
| 79.143.191.165 | 106 | France | |
| 80.241.221.45 | 54 | France | |
| 173.212.220.109 | 32 | France | |
| 169.58.223.101 | 27 | France | |
| 157.173.111.223 | 27 | France | |
| 5.189.163.200 | 27 | France |
Where it comes from
| Country | Probes |
|---|---|
| France | 877 |
| Germany | 56 |
| United Kingdom | 4 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 560 |
| Go-http-client/1.1 | 112 |
| Mozilla/5.0 | 23 |
| Python/3.12 aiohttp/3.9.1 | 20 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0 Safari/537.36 | 15 |
ASN report
ASN report
Loading