16.15.252.91
16.15.252.91 is an IPv4 address operated by Amazon.com, Inc. (AS14618), geolocated to Ashburn, United States. As of November 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
Intelligence Briefing: 16.15.252.91/32
Classification: Low Risk
Ownership: Amazon.com, Inc. (AS14618, AMAZO-4)
Location: Ashburn, VA, US
The IP address 16.15.252.91 was identified as a commercial infrastructure endpoint associated with Amazon Web Services. Ownership records confirmed the address belongs to the 16.15.0.0/16 netblock registered in Ashburn, Virginia.
Operational Profile:
Traffic analysis revealed the endpoint functioned as a web server hosting Amazon S3 services. The server banner returned "AmazonS3," and TLS certificates validated against `s3.amazonaws.com`. Active listening ports included 80 (HTTP), 443 (HTTPS), and 8080 (HTTP-alt).
Threat Indicators:
The address maintained a Low Risk reputation score of 25. No active malicious indicators, known campaigns, or spam source associations were detected. One DNSBL listing was recorded out of eight total lists checked. Behavioral analysis indicated zero WAF violations or honeypot hits.
Data Anomalies:
A contradiction existed between the claimed US geolocation and RTT physics measurements, indicating a 6312km distance versus a 29ms round-trip time. Overall data confidence was rated Very Low.
Recommendation:
SOC analysts should monitor the IP address for changes in behavior or reputation. The current threat severity is Low. No immediate blocking is required
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS14618 |
| Network Name | AMAZO-4 |
| CIDR Block | 16.15.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 8080 | http-alt | tcp | — |
| Closed Ports | 22, 25, 3389, 8443 (3 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | s3.amazonaws.com*.s3.amazonaws.com*.s3-accesspoint.us-east-1.amazonaws.com*.s3-control.us-east-1.amazonaws.coms3.dualstack.us-east-1.amazonaws.com*.s3-external-2.amazonaws.coms3-control.dualstack.us-east-1.amazonaws.com*.s3-deprecated.us-east-1.amazonaws.com*.s3-accesspoint.dualstack.us-east-1.amazonaws.coms3.us-east-1.amazonaws.com |
| Valid From | 2026-09-20T00:00:00+00:00 |
| Valid Until | 2027-04-05T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
🛡️ Public Network Snapshot
| Origin ASN | AS14618 |
| Network Prefix | 16.15.248.0/21 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 6 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-11-07 03:06:17 UTC |
| Last Seen | 2026-11-07 03:06:17 UTC |
| Profile Built | 2026-11-07 03:30:07 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 16.15.252.91
Who owns the IP address 16.15.252.91?
16.15.252.91 is registered to Amazon.com, Inc.. The address falls within the 16.15.0.0/16 network block. Registration is held at ARIN.
Where is 16.15.252.91 located?
Geolocation data places 16.15.252.91 in Ashburn, VA, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 16.15.252.91 malicious or safe?
16.15.252.91 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 16.15.252.91?
Responsive ports observed on 16.15.252.91 include 80, 443, 8080. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.