AS16509: Amazon.com, Inc.
HoneyLabs honeypots recorded 22,561 probes from AS16509 (Amazon.com, Inc.) in the last 7 days, originating from 235 distinct source IP addresses.
First observed 2026-08-08 08:53:03, most recently 2026-08-15 08:48:26 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 443 | 404 |
| 6379 | 244 |
| 2049 | 193 |
| 9002 | 181 |
| 8085 | 178 |
| 8100 | 177 |
| 8180 | 176 |
| 80 | 174 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 18.218.118.203 | 5,392 | United States | |
| 3.129.187.38 | 4,718 | United States | |
| 18.116.101.220 | 4,185 | United States | |
| 3.130.168.2 | 3,910 | United States | |
| 3.131.220.121 | 3,006 | United States | |
| 3.144.231.7 | 421 | United States | |
| 3.138.247.99 | 122 | United States | |
| 3.145.216.137 | 119 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 22,480 |
| United Kingdom | 18 |
| Germany | 18 |
| Canada | 16 |
| Singapore | 14 |
| Australia | 14 |
Client strings it sends
| User agent | Probes |
|---|---|
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 18,319 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36 | 240 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | 119 |
| Mozilla/5.0 zgrab/0.x | 24 |
| Go-http-client/1.1 | 3 |
ASN report
ASN report
Loading live data…