Autonomous system
AS16509 AMAZON-02
Hosting ARIN
Summary
Amazon.com, Inc. (AWS)
cloud hosting compute
One of the main Autonomous Systems behind Amazon Web Services (AWS), the largest
public cloud provider. Addresses here belong to EC2 instances, load balancers,
and other AWS-hosted infrastructure.
What it's used for
- Hosting a vast range of third-party services, APIs, and websites that run on AWS compute (EC2, ECS/EKS, Lambda behind NAT, etc.).
- Amazon publishes its cloud IP ranges as a machine-readable [
ip-ranges.json](https://www.ipinfo.app/out/?url=https%3A%2F%2Fip-ranges.amazonaws.com%2Fip-ranges.json), broken down by region and service.
Notable
- An IP in this ASN identifies AWS as the host, not the operator of whatever runs on it — it could be a Fortune 500 app or an abusive VPS.
- AWS uses several ASNs (e.g. AS14618 Amazon US-East, AS16509 globally); which one announces a given prefix varies by region and history.
Interesting
- AWS launched in 2006 with S3 and EC2, effectively creating the modern infrastructure-as-a-service market.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Address space
Summary
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 15,315 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS16509- Registry name
- AMAZON-02
- Registrant
- Amazon.com, Inc.
- Abuse contact
- trustandsafety@support.aws.com
- Registered
- 2000-05-04
- Last changed
- 2012-03-02
- Status
- active
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
1 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
64.95.84.159 | Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Data Theft and Extortion | 2025-09-12 |
Threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere