# 16.15.37.37 — IP Intelligence Summary

16.15.37.37 is an IPv4 address operated by Amazon.com, Inc. (AS16509), geolocated to Portland, United States. As of November 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/16.15.37.37
- Last updated: 2026-11-07

## Ownership

- Organization: Amazon.com, Inc.
- Network name: AMAZO-4
- Allocated block: 16.15.0.0/16
- ASN: AS16509 (https://ipdebrief.com/asn/16509)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Portland
- Region: OR
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: Unknown
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https
- 8080/tcp — http-alt

## Analyst narrative

IP address 16.15.37.37/32 was identified as a low-risk asset with a reputation score of 25. Ownership records confirmed the address belongs to Amazon.com, Inc. (AS16509), operating within the AMAZO-4 network block. Infrastructure classification indicated Amazon Web Services cloud compute hosting with open TCP ports 80, 443, and 8080. TLS certificate analysis confirmed the host served Amazon S3 domains within the us-west-2 region, matching the "AmazonS3" server banner.

Threat analysis showed zero blacklist hits, no known campaigns, and zero observed incidents. Despite the low-risk classification, the threat actor profile was tagged as "Suspicious Host." Geolocation data placed the server in Portland, OR, USA, but temporal analysis flagged a contradiction where the claimed geolocation contradicted RTT physics measurements (7950km distance versus 87ms average RTT).

Current guidance recommends monitoring the address due to signal contradictions present in the data. No immediate blocking action was required based on current threat levels.

## Nearby addresses

- 16.15.37.38 (https://ipdebrief.com/16.15.37.38)
- 16.15.37.39 (https://ipdebrief.com/16.15.37.39)
- 16.15.37.165 (https://ipdebrief.com/16.15.37.165)
- 16.15.37.182 (https://ipdebrief.com/16.15.37.182)
- 16.15.37.185 (https://ipdebrief.com/16.15.37.185)
- 16.15.37.187 (https://ipdebrief.com/16.15.37.187)
- 16.15.37.233 (https://ipdebrief.com/16.15.37.233)

---

Source: IPDebrief, "16.15.37.37 IP intelligence", https://ipdebrief.com/16.15.37.37, updated 2026-11-07. Assessments are probabilistic.