Intelligence Briefing: 184.194.57.171
Overview
The IP address 184.194.57.171 was identified as a low-risk endpoint associated with Amazon.com, Inc. (AS14618). Geolocation data placed the host in Ashburn, Virginia, United States.
Technical Profile
Network analysis indicated the endpoint functioned as a Web Server operating on port 443 over HTTP/2.0. A TLS certificate issued by Amazon RSA 2048 M01 was presented for the domain account-link.nabucasa.com. Reverse DNS resolution returned the hostname ec2-184-194-57-171.compute-1.amazonaws.com, which was forward confirmed. DNS hygiene was rated Good with SPF and DMARC records present.
Threat Indicators
No malicious indicators were detected. The address returned zero blacklisting, zero known campaigns, and zero reported incidents. Behavioral logs recorded no honeypot hits, enumeration strikes, or WAF violations. The IP was not classified as a Tor exit, proxy, or known attacker.
Recommendation
Traffic was recommended to be allowed. The assessment concluded the address represents a legitimate infrastructure endpoint with consistent DNS hygiene and minimal operator risk.
Timeline
Observations were recorded between 2026-09-10T09:22:04 and 2026-09-10T09:28:26.
Confidence
Overall confidence was rated Very Low (0.1833) due to limited data sufficiency, though the attribution label remained Moderate regarding ownership. The profile was marked as live with data freshness verified.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS14618 |
| Network Name | AMAZO-4 |
| CIDR Block | 184.192.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-184-194-57-171.compute-1.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-184-194-57-171.compute-1.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | account-link.nabucasa.com |
| Valid From | 2026-08-31T00:00:00+00:00 |
| Valid Until | 2027-03-16T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 02D656E0DAC998EBC652F2780DD76730 |
| Thumbprint | 1716AF433E50BE562648CA12CE07F5B36529E9F0 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-10 09:22:04 UTC |
| Last Seen | 2026-09-10 09:22:04 UTC |
| Profile Built | 2026-09-10 09:39:19 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.