IOC Radar
IPMediumSignal 84/100

51.158.187.12

Location
NetherlandsNetherlands
Haarlem, IDF
ASN
AS12876
Scaleway
First Seen
Apr 14, 2026
Last Seen
May 30, 2026
Apr 14
First Seen
72d ago
May 30
Last Seen
26d ago
14
Reports
source reports
84%
Confidence
medium
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
84%
Signal Score
84 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

8 techniques

Network Information

CountryNLNetherlands
RegionHaarlem, IDF
ASNAS12876
OrganizationScaleway

Feed Intelligence Summary

14 reports84% confidence
14
Source reports
84%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningattackaustraliabad reputationbrute forcebrute force attackbrute force attackerbrute-forcebruteforcecredential accesscredential stuffingddosddos attackdigital oceaneuropeexploitation activityfranceftp brute-forcehackingidentity & access exploitationindicatormalicious activitymalwarenetherlandsnetworknloceaniapassword attacksping of deathportscanreconnaissanceresearchedscanscannerscannerssecurity policyservice scansipsshssh attackt1110.001t1110.002t1110.003t1110.004t1595t1595.001t1595.002t1595.003threat actorthreat preventiontor nodevultr

Activity Timeline

1 total obs
May 30May 30

Threat Activity Heatmap

· Peak: 2026-05-30
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
84
SIGNAL
Signal Score
84%
Confidence
14
Reports
First seenApr 14, 2026
Last seenMay 30, 2026
GeolocationNL
CountryNetherlands
LocationHaarlem, IDF
ASNAS12876
OrgScaleway
Coords48.8607, 2.3281

VirusTotal

Not checked

WHOIS

description
IPV4 hosts detected performing scans on production environment located in Australia.
raw
inetnum: 51.158.128.0 - 51.158.255.255 netname: SCALEWAY-AMS descr: Scaleway - Amsterdam, Netherlands status: LEGACY remarks: Abuse reports : https://abuse.online.net/ country: NL org: ORG-ONLI1-RIPE admin-c: MM42047-RIPE tech-c: MM42047-RIPE mnt-by: ONLINE-NET-MNT created: 2019-05-06T11:58:01Z last-modified: 2022-05-04T17:24:57Z source: RIPE organisation: ORG-ONLI1-RIPE mnt-ref: MNT-TISCALIFR-B2B org-name: Scaleway org-type: OTHER address: 8 rue de la ville l'eveque 75008 PARIS abuse-c: AR32851-RIPE mnt-ref: ONLINE-NET-MNT mnt-ref: PROXAD-MNT mnt-by: ONLINE-NET-MNT created: 2015-07-10T15:20:41Z last-modified: 2026-03-06T10:49:57Z source: RIPE # Filtered person: Mickael Marchand address: 8 rue de la ville l'eveque 75008 PARIS phone: +33173502000 nic-hdl: MM42047-RIPE mnt-by: MMA-MNT created: 2015-07-10T15:02:32Z last-modified: 2016-02-23T12:43:25Z source: RIPE # Filtered route: 51.158.128.0/17 descr: SCALEWAY descr: Amsterdam, Netherlands origin: AS12876 mnt-by: MNT-TISCALIFR mnt-by: ONLINE-NET-MNT created: 2019-10-03T15:09:09Z last-modified: 2022-05-03T10:05:58Z source: RIPE
references
https://jamesbrine.com.au/digitaloceanlondon-portscan-bruteforce-ip-list-2026-04-15/, https://jamesbrine.com.au, https://jamesbrine.com.au/vultrtokyo-portscan-bruteforce-ip-list-2026-04-15/, https://jamesbrine.com.au/vultrmelbournetest-portscan-bruteforce-ip-list-2026-04-15/, https://redpiranha.net

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 26 days ago
Appeared in 14 threat reports