AS16509: Amazon.com, Inc.
HoneyLabs honeypots recorded 22,743 probes from AS16509 (Amazon.com, Inc.) in the last 7 days, originating from 291 distinct source IP addresses.
First observed 2026-08-30 05:12:45, most recently 2026-09-06 05:09:51 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 5001 | 746 |
| 3000 | 723 |
| 9000 | 543 |
| 8888 | 471 |
| 5000 | 453 |
| 8000 | 375 |
| 8080 | 337 |
| 443 | 277 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 18.116.101.220 | 4,705 | United States | |
| 18.218.118.203 | 4,084 | United States | |
| 3.129.187.38 | 3,908 | United States | |
| 52.24.112.111 | 3,146 | United States | |
| 3.130.168.2 | 3,089 | United States | |
| 3.131.220.121 | 2,848 | United States | |
| 3.142.68.8 | 172 | United States | |
| 18.218.44.9 | 74 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 22,650 |
| Germany | 24 |
| Canada | 18 |
| Singapore | 17 |
| Australia | 16 |
| United Kingdom | 14 |
Client strings it sends
| User agent | Probes |
|---|---|
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 15,874 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 | 3,146 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36 | 186 |
| Mozilla/5.0 zgrab/0.x | 30 |
| Mozilla/5.0 | 2 |
ASN report
ASN report
Loading live data…