← Back to feed

AS12876 Scaleway SAS

ASN Active medium
Why this campaign was detected
8 IPs from the same network (Scaleway SAS, AS12876) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS12876 · Scaleway SAS
Subnet
Country
🇫🇷 FR
Cloud Provider
Member Count
8 IPs
Below average
Total Events
5144
Below average by volume
Started / Ended
2026-03-01 23:18 — ongoing
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
62.210.207.172 credential_harvester 54% 1x OSINT 784 2 ssh:bruteforce 2026-07-17 19:47 evidence →
62.210.246.122 credential_harvester 49% 1x OSINT 732 2 ssh:bruteforce 2026-07-15 08:12 evidence →
51.159.125.104 web_probe 45% 12 2 http:scanssh:bruteforce 2026-07-17 12:19 evidence →
62.210.189.225 credential_harvester 42% 1244 2 ssh:bruteforce 2026-07-14 00:40 evidence →
51.159.104.219 credential_harvester 40% 964 2 ssh:bruteforce 2026-07-13 02:49 evidence →
62.210.38.102 credential_harvester 39% 460 2 ssh:bruteforce 2026-07-13 06:55 evidence →
62.210.199.83 credential_harvester 39% 936 2 ssh:bruteforce 2026-07-12 03:03 evidence →
62.210.80.37 scanner 31% 12 2 ssh:bruteforce 2026-07-15 08:54 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds