AS61272: UAB Bacloud
HoneyLabs honeypots recorded 931 probes from AS61272 (UAB Bacloud) in the last 7 days, originating from 14 distinct source IP addresses.
First observed 2026-11-07 08:16, most recently 2026-11-11 10:15 (UTC).
What the sensors show
Probes arrived on 3 of the 7 days in this window. The busiest day was 2026-11-10, with 851. Its 14 addresses probed 20 distinct ports. No port took more than 8% of the probes. No single address sent more than 14% of them. None of the 14 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 20259 | 70 |
| 789 | 66 |
| 503 | 65 |
| 4712 | 65 |
| 34962 | 65 |
| 44819 | 65 |
| 20000 | 63 |
| 505 | 62 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 86.38.159.52 | 130 | Lithuania | |
| 86.38.159.61 | 130 | Lithuania | |
| 86.38.159.62 | 128 | Lithuania | |
| 86.38.159.48 | 70 | Lithuania | |
| 86.38.159.56 | 63 | Lithuania | |
| 86.38.159.58 | 60 | Lithuania | |
| 86.38.159.54 | 60 | Lithuania | |
| 86.38.159.53 | 59 | Lithuania |
Where it comes from
| Country | Probes |
|---|---|
| Lithuania | 931 |
Client strings it sends
| User agent | Probes |
|---|---|
| nerva/1.0 | 869 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 | 5 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 | 5 |
ASN report
ASN report
Loading