AS50360: Tamatiya EOOD
HoneyLabs honeypots recorded 8,321 probes from AS50360 (Tamatiya EOOD) in the last 7 days, originating from 11 distinct source IP addresses.
First observed 2026-11-08 06:19, most recently 2026-11-15 05:50 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-12, with 3,699. Its 11 addresses probed 545 distinct ports. The most probed was port 5432, with 43% of the probes. One address, 79.124.56.246, sent 74% of them. None of the 11 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 5432 | 3,548 |
| 4173 | 1,848 |
| 8081 | 647 |
| 443 | 350 |
| 80 | 343 |
| 8443 | 151 |
| 8080 | 151 |
| 9515 | 76 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 79.124.56.246 | 6,150 | Bulgaria | |
| 79.124.59.78 | 961 | Bulgaria | |
| 79.124.58.82 | 898 | Bulgaria | |
| 79.124.58.22 | 95 | Bulgaria | |
| 91.148.190.150 | 80 | Bulgaria | |
| 79.124.59.82 | 71 | Bulgaria | |
| 79.124.58.218 | 43 | Bulgaria | |
| 79.124.59.254 | 12 | Bulgaria |
Where it comes from
| Country | Probes |
|---|---|
| Bulgaria | 8,321 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 6,150 |
| Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) | 898 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3 | 71 |
| Mozilla/5.0 (X11; Linux x86_64; rv:115.0) Gecko/20100101 Firefox/115.0 | 65 |
| cryptohunt/2.0 | 27 |
ASN report
ASN report
Loading