Cloud Hosting
AS16509 — Amazon.com, Inc. (AWS)
Amazon's primary AWS autonomous system. Most EC2, ELB, and CloudFront traffic originates here.
About this autonomous system
AS16509 is the largest of several Amazon ASes and carries the bulk of AWS customer traffic. If a connection or scrape hits you from this AS, it's a workload running on EC2 — could be anything from a legitimate API client to a bot. AWS makes its IP ranges publicly available in a JSON manifest, which firewalls and abuse-detection systems commonly use to flag datacenter traffic. The AS announces millions of IPs across every AWS region.
Common uses
- •EC2 instances
- •Lambda outbound traffic
- •Application Load Balancers
- •AWS-hosted bots
Notable IP ranges
- 3.0.0.0/8 (partial)
- 13.32.0.0/15
- 52.0.0.0/11
- 54.0.0.0/8 (partial)
Illustrative — Amazon.com, Inc. (AWS) announces many more ranges.
Look up an IP from this ASN
Want to check whether a specific IP belongs to Amazon.com, Inc. (AWS)? Use our IP lookup tool to see the ASN, location, and reverse DNS of any address.
Open IP Lookup →Frequently asked questions
- Who owns AS16509?
- AS16509 is registered to Amazon.com, Inc. (AWS) in US. Amazon's primary AWS autonomous system. Most EC2, ELB, and CloudFront traffic originates here.
- What kind of traffic comes from AS16509?
- AS16509 is classified as a cloud hosting. Common services include EC2 instances, Lambda outbound traffic, Application Load Balancers.
- Is an IP from AS16509 a bot or proxy?
- Not necessarily, but IPs from AS16509 are datacenter origins — legitimate API clients, hosted services, or sometimes scrapers and bots. Many anti-abuse systems treat Amazon.com, Inc. (AWS) traffic with extra scrutiny because it's not from a residential user.
- What IP ranges does AS16509 announce?
- Some of the notable ranges include 3.0.0.0/8 (partial), 13.32.0.0/15, 52.0.0.0/11 — but Amazon.com, Inc. (AWS) announces many more. Use our IP lookup to check a specific IP.