AS16509 — AMAZON-02 Threat Intelligence

Network Threat Summary

AS16509 (AMAZON-02) has 121,781 malicious IP addresses with 3,340,087 abuse reports across 33 countries. First activity recorded 2022-08-21, most recent activity 2025-12-20.

Threat Profile: The primary attack categories observed from this network are suspicious activity, professional threat, malware c2. This autonomous system is among the most prolific threat sources globally, with an exceptionally high concentration of malicious IP addresses. Affected countries include US, SG, IE.

Risk Assessment: CRITICAL - This autonomous system is a major source of malicious activity, ranking in the top 1% of threat networks globally. Consider blocking the entire ASN or implementing strict rate limiting.

Top Attack Categories

• Suspicious Activity 2,436,396 reports
• Professional Threat 723,050 reports
• Malware C2 191,698 reports
• Aggregated Threat 115,383 reports
• Severe Abuse 97,858 reports

Top Affected Countries

• US 1,480,789 reports
• SG 635,065 reports
• IE 227,295 reports

Most Reported IPs

• 199.59.243.228 1,043 reports
• 3.130.96.91 992 reports
• 3.132.23.201 967 reports
• 3.134.148.59 894 reports
• 3.137.73.221 893 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS16509 threat data into your security stack with our REST API.

See how we classify and verify threats →