AS16509: Amazon.com, Inc.
HoneyLabs honeypots recorded 12,898 probes from AS16509 (Amazon.com, Inc.) in the last 7 days, originating from 253 distinct source IP addresses.
First observed 2026-09-22 12:21:39, most recently 2026-09-29 12:20:52 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 443 | 234 |
| 10000 | 127 |
| 80 | 126 |
| 6379 | 126 |
| 30080 | 107 |
| 10003 | 100 |
| 1000 | 96 |
| 90 | 94 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 18.116.101.220 | 4,778 | United States | |
| 18.218.118.203 | 3,492 | United States | |
| 3.130.168.2 | 2,485 | United States | |
| 3.131.220.121 | 841 | United States | |
| 3.129.187.38 | 739 | United States | |
| 175.41.176.248 | 68 | Singapore | |
| 13.60.143.220 | 22 | Sweden | |
| 13.232.90.87 | 22 | India |
Where it comes from
| Country | Probes |
|---|---|
| United States | 12,680 |
| Singapore | 82 |
| Australia | 41 |
| India | 29 |
| Sweden | 24 |
| United Kingdom | 15 |
Client strings it sends
| User agent | Probes |
|---|---|
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 9,994 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36 | 221 |
| Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9) | 40 |
| Mozilla/5.0 | 28 |
| Mozilla/5.0 zgrab/0.x | 16 |
ASN report
ASN report
Loading live data…