16.12.88.210
Intelligence briefing for IP 16.12.88.210 indicates ownership by Amazon.com, Inc. within the AMAZO-4 network block (ASN 16509). The address is associated with the CIDR 16.12.0.0/16 and resolved to the PTR hostname s3-us-west-2-r-w.amazonaws.com, confirming service operation on the S3 platform in the US West-2 region. Network analysis identified open ports 80 (HTTP) and 443 (HTTPS) with a server banner identifying AmazonS3.
Risk assessment classified the reputation as Low Risk with a risk score of 25. Although the address was not flagged as a known attacker or Tor exit node, one DNS blacklist listing was recorded out of eight total checks. The threat actor classification marked the host as "Suspicious Host" due to signal contradictions, specifically a discrepancy between the claimed geolocation in Boardman, OR, and RTT physics measurements. Behavioral analysis found no WAF violations, honeypot hits, or enumeration strikes.
Recommendations assigned a severity of low with an action to monitor due to the presence of signal contradictions. Data freshness confirmed live signals, and the overall confidence level was labeled Very Low based on data sufficiency.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-4 |
| CIDR Block | 16.12.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | s3-us-west-2-r-w.amazonaws.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Hosted Domain | airstreamnw.s3-us-west-2.amazonaws.com |
| Hosted Domain | alexgeoffrey.s3.us-west-2.amazonaws.com |
| Hosted Domain | bc-helm-charts-153454541801.s3.us-west-2.amazonaws.com |
| Hosted Domain | briggs-media-cloud.s3.us-west-2.amazonaws.com |
| Hosted Domain | buckwlit2020.s3.us-west-2.amazonaws.com |
| …and 29 more domains | |
| Forward Hostnames | s3-us-west-2-r-w.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Shared Hosting |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | AmazonS3 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.s3-us-west-2.amazonaws.com*.s3.amazonaws.coms3-control.us-west-2.amazonaws.com*.s3.dualstack.us-west-2.amazonaws.coms3-deprecated.us-west-2.amazonaws.coms3-control.dualstack.us-west-2.amazonaws.com*.s3-deprecated.us-west-2.amazonaws.coms3.amazonaws.coms3.dualstack.us-west-2.amazonaws.com*.s3-control.dualstack.us-west-2.amazonaws.com |
| Valid From | 2025-11-18T00:00:00+00:00 |
| Valid Until | 2026-10-30T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 346 days |
| Serial Number | 0F061457518182D12E2A6E2A1F0B6A58 |
| Thumbprint | F8A8052C6A4D1B65BBE8A25159D059B84184CB1E |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 33% | 2 | 4 |
| Overall | 28% | 10 | 19 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-08 06:22:59 UTC |
| Last Seen | 2026-09-25 20:00:52 UTC |
| Profile Built | 2026-09-25 20:09:46 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 32 |
Full dossier details are available via our API.