AS16509 — AMAZON-02 Threat Intelligence

Network Threat Summary

AS16509 (AMAZON-02) has 42,650 malicious IP addresses with 2,467,978 abuse reports across 28 countries. First activity recorded 2022-08-21, most recent activity 2025-12-20.

Threat Profile: The primary attack categories observed from this network are suspicious activity, professional threat, malware c2. This network shows significant threat activity well above the global median, warranting enhanced monitoring. Affected countries include US, SG, IE.

Risk Assessment: HIGH - Significant threat activity originates from this network. Enhanced monitoring and aggressive IP blocking are recommended.

Top Attack Categories

• Suspicious Activity 2,436,396 reports
• Professional Threat 723,050 reports
• Malware C2 191,698 reports
• Aggregated Threat 115,383 reports
• Severe Abuse 97,858 reports

Top Affected Countries

• US 1,480,789 reports
• SG 635,065 reports
• IE 227,295 reports

Most Reported IPs

• 3.130.96.91 783 reports
• 3.132.23.201 782 reports
• 3.137.73.221 723 reports
• 3.134.148.59 722 reports
• 3.143.33.63 668 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS16509 threat data into your security stack with our REST API.

See how we classify and verify threats →