35.160.53.86
Intelligence Briefing: 35.160.53.86
Overview
The IP address 35.160.53.86 was identified as a Web Server within the Amazon Web Services (AWS) cloud infrastructure (ASN 16509). The asset registered a Low Risk reputation score of 25 during the observation period.
Infrastructure and Geolocation
DNS PTR records resolved the address to an EC2 instance in the us-west-2 region (Portland, OR). The TLS certificate presented for the domain `*.samsungqbe.com` listed Samsung Electronics CO., LTD. as the organization in Suwon-si, Gyeonggi-do, South Korea.
Threat Indicators and Anomalies
Observations recorded one DNSBL listing out of eight total lists. While no known campaigns were associated with the address, the profile was classified as a "Suspicious Host" with zero incidents and no active attacker indicators. The asset exhibited signal contradictions, specifically regarding geolocation consensus (US vs. KR) and route stability.
Recommendation
Maintain monitoring of the asset. No immediate firewall rules were generated due to the low risk classification, though analysts should verify the alignment between the US-based hosting footprint and the Korean corporate certificate issuance.
Status: Live
Confidence: Low
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-ZPDX9 |
| CIDR Block | 35.160.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-35-160-53-86.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-35-160-53-86.us-west-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungqbe.comsamsungqbe.com |
| Valid From | 2026-07-15T00:00:00+00:00 |
| Valid Until | 2027-01-29T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 0EA6F5AB0FC6174A5938B847D86047EE |
| Thumbprint | 6751CDE06C721A8EA7377A5332E9CC77C468BDB0 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 20% | 1 | 1 |
| services | 40% | 2 | 3 |
| ownership | 40% | 2 | 3 |
| reputation | 20% | 1 | 2 |
| geolocation | 40% | 2 | 3 |
| Overall | 33% | 10 | 15 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-09 12:06:36 UTC |
| Last Seen | 2026-09-10 17:43:23 UTC |
| Profile Built | 2026-09-10 18:09:47 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 33 |
Full dossier details are available via our API.