ASN report
AS16509Amazon.com, Inc.
7-day honeypot activity for this autonomous system. First seen probing on 2026-05-14, most recent probe 2026-05-21 11:54.
Events 7d
18,760
Distinct IPs
281
Source countries
10
Ports targeted
264
Top dest ports
Top source countries
- United States18,393
- Ireland278
- Singapore16
- United Kingdom15
- Canada14
- Australia14
- Germany13
- France11
- India3
- Japan3
Top source IPs in AS16509
- 16.58.56.2143,657 eventsUnited States5001808624000443331112
- 18.218.118.2032,921 eventsUnited States2049800219000Telnet3001
- 18.116.101.2202,791 eventsUnited States5001500049000444430001
- 3.129.187.382,553 eventsUnited StatesSOCKS53538290809443
- 3.130.168.22,220 eventsUnited States8069828200944390
- 3.131.220.1211,747 eventsUnited States80028265208382002079
- 3.132.26.232747 eventsUnited States826580868225690
- 3.134.216.108618 eventsUnited States300058265HTTP33338085
- 52.51.123.95276 eventsIrelandHTTPS
- 3.143.162.210269 eventsUnited States1000375472567681162
- 3.151.241.153166 eventsUnited States2049500282240012086
- 18.220.174.16069 eventsUnited States9090240459388389465
- 13.58.70.13863 eventsUnited States83891231232111942077
- 3.19.219.3546 eventsUnited States24003801044491619999
- 3.133.88.18438 eventsUnited States5555580088291333389
- 216.73.216.21334 eventsUnited StatesHTTP
- 3.128.188.19829 eventsUnited StatesOracle590110003162
- 216.73.216.4326 eventsUnited StatesHTTP
- 18.118.147.23822 eventsUnited States1625002Oracle
- 15.236.40.1811 eventsFrance4876255347293092382556947
- 16.176.125.24611 eventsAustraliaHTTPS
- 18.188.191.6010 eventsUnited States6311701
- 3.137.154.219 eventsUnited States555558291
- 54.176.35.498 eventsUnited StatesSSH
- 54.176.218.728 eventsUnited StatesSSH
Top user-agents from AS16509
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3615,073
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36276
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36248
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)62
- Mozilla/5.0 zgrab/0.x24
- Go-http-client/1.118
- Docker-Client/20.10.21 (linux)2
- curl/7.81.01
JSON: /api/asn/16509. Top ASNs feed: /api/asns.