AS267784: Flyservers S.A.
HoneyLabs honeypots recorded 168 probes from AS267784 (Flyservers S.A.) in the last 7 days, originating from 6 distinct source IP addresses.
First observed 2026-11-10 22:19, most recently 2026-11-15 03:32 (UTC).
What the sensors show
Probes arrived on 5 of the 7 days in this window. The busiest day was 2026-11-14, with 122. Its 6 addresses probed 9 distinct ports. The most probed was port 8080, with 20% of the probes. One address, 45.227.254.71, sent 40% of them. None of the 6 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 8080 | 34 |
| 22 | 17 |
| 443 | 17 |
| 4433 | 17 |
| 4443 | 17 |
| 5443 | 17 |
| 8443 | 17 |
| 54321 | 17 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 45.227.254.71 | 68 | Panama | |
| 45.227.254.70 | 34 | Panama | |
| 45.227.254.72 | 34 | Panama | |
| 45.227.254.73 | 17 | Panama | |
| 45.227.254.130 | 9 | Panama | |
| 45.227.254.132 | 6 | Panama |
Where it comes from
| Country | Probes |
|---|---|
| Panama | 168 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 | 36 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 35 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 | 30 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 | 28 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 | 24 |
ASN report
ASN report
Loading