AS14618: Amazon.com, Inc.
HoneyLabs honeypots recorded 2,388 probes from AS14618 (Amazon.com, Inc.) in the last 7 days, originating from 720 distinct source IP addresses.
First observed 2026-11-07 05:29, most recently 2026-11-14 04:49 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-13, with 621. Its 720 addresses probed 228 distinct ports. The most probed was port 443, with 21% of the probes. No single address sent more than 7% of them. 23 of the 25 busiest addresses are recognised research scanners.
Ports it targets
| Port | Probes |
|---|---|
| 443 | 505 |
| 8443 | 119 |
| 3232 | 84 |
| 9200 | 79 |
| 7001 | 48 |
| 2376 | 39 |
| 22 | 39 |
| 18789 | 36 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 13.220.52.149 | 170 | United States | |
| 107.20.81.2 | 170 | United States | |
| 18.97.5.119 | 24 | United States | |
| 44.220.188.232 | 17 | United States | |
| 18.97.19.173 | 17 | United States | |
| 44.220.185.147 | 15 | United States | |
| 44.220.188.185 | 15 | United States | |
| 44.220.188.181 | 15 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 2,388 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 | 487 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 182 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 170 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 170 |
| elasticsearch-py/7.13.4 (Python 3.10.22) | 48 |
ASN report
ASN report
Loading