Hosting and cloud
AS8987 is the autonomous system number (ASN) announced by Amazon. It announces 160 prefixes, 1,287,168 IPv4 addresses in total. Every address inside those ranges is routed by this operator, which is what makes the number the shortest answer to who runs a given address.
| Organisation | Amazon |
|---|---|
| Autonomous system | AS8987 |
| Network type | Hosting and cloud |
| IPv4 prefixes | 99 |
| IPv6 prefixes | 61 |
| IPv4 addresses | 1,287,168Summed across every announced prefix. IPv6 is not counted; the numbers are meaningless at that scale. |
| In known VPN ranges | 0 of 99 prefixes |
| In known datacenter ranges | 99 of 99 prefixes |
The last two rows are a second opinion, counted against the X4BNet VPN and datacenter range lists rather than read off the operator name. A network with most of its prefixes in the VPN list is carrying anonymised traffic whatever it calls itself.
The largest ranges Amazon announces, biggest first. These are a sample and not the full routing table: 160 prefixes do not fit on a page, and the ones worth showing are the ones most traffic comes from.
| Prefix | Family | Addresses |
|---|---|---|
| 3.30.0.0/15 | IPv4 | 131,072 |
| 18.252.0.0/15 | IPv4 | 131,072 |
| 40.38.0.0/15 | IPv4 | 131,072 |
| 56.136.0.0/15 | IPv4 | 131,072 |
| 3.32.0.0/16 | IPv4 | 65,536 |
| 15.200.0.0/16 | IPv4 | 65,536 |
| 15.205.0.0/16 | IPv4 | 65,536 |
| 16.65.0.0/16 | IPv4 | 65,536 |
| 16.66.0.0/16 | IPv4 | 65,536 |
| 18.254.0.0/16 | IPv4 | 65,536 |
| 52.61.0.0/16 | IPv4 | 65,536 |
| 160.1.0.0/16 | IPv4 | 65,536 |
Live check
The field is prefilled with 3.30.0.1, the first address of the largest range above. Change it for one from your own logs and you get the network, the operator and the verdict for that specific address.
Addresses on Amazon are infrastructure: servers, containers and managed services, not people at home. Our engine classifies them datacenter or hosting and never as VPN, because renting a machine is not running a VPN service. It does set anonymized, since a person browsing from a rented server is usually behind a self-hosted VPN, unless the address is known infrastructure such as a public resolver. That distinction matters for what you do next. A signup from here is worth a second look because automation lives on networks like this one, but blocking the range outright also blocks every monitoring service, payment webhook and corporate proxy that runs on it.
The verdict for a single address is never settled by the ASN alone. It is the starting point, and IP Detection adds range membership, behaviour and history on top of it before it answers.
Ein Aufruf liefert ASN, Betreiber und Netztyp (Hosting, VPN, Mobilfunk, ISP) für jede Adresse. Kostenlos für 30.000 Anfragen pro Monat, ohne Karte.