35.165.236.20
IP 35.165.236.20 was identified as infrastructure associated with Amazon.com, Inc. (ASN 16509) within the 35.160.0.0/13 block. Geolocation data primarily placed the host in Portland, OR, US, though conflicting sources indicated South Korea. The endpoint resolved to `ec2-35-165-236-20.us-west-2.compute.amazonaws.com` and presented a TLS certificate for `*.samsungcloud.com` issued by Sectigo. Port 443 was open, and the server returned an HTTP 404 status.
Threat intelligence reports classified the reputation as Low Risk with a risk score of 0. No known attacker status, blacklist entries, or active threat campaigns were associated with the address. Data coherence analysis revealed mixed signals due to geographic contradictions and the discrepancy between the certificate subject country and the primary geolocation. The assessment recommended monitoring the asset for changes rather than immediate blocking, citing signal contradictions as the primary concern.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-ZPDX9 |
| CIDR Block | 35.160.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-35-165-236-20.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-35-165-236-20.us-west-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungcloud.comsamsungcloud.com |
| Valid From | 2026-09-07T00:00:00+00:00 |
| Valid Until | 2027-03-24T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 7AFA9F14AE3DDA1FB02ADB5E78837276 |
| Thumbprint | AF00399B14B8835A96E0387655E1630BD2668B21 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 22% | 6 | 7 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-19 03:34:16 UTC |
| Last Seen | 2026-09-19 03:34:16 UTC |
| Profile Built | 2026-09-19 03:47:02 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.