44.231.252.146
Intelligence profile was generated for IP 44.231.252.146. The asset was owned by Amazon.com, Inc. (ASN 16509) and identified as an EC2 instance within the US-West-2 region. Network role classification placed the IP as a Web Server. Passive scanning confirmed HTTPS service on port 443 with a TLS certificate issued for Samsung Electronics (samsungcloud.com). Contradictions were identified between geolocation data (United States) and the certificate's organizational location (South Korea), alongside discrepancies among geolocation sources. No active threat indicators, blacklisting, or known campaign associations were detected. Behavioral analysis showed zero enumeration strikes, honeypot hits, or WAF violations. The control plane demonstrated valid RPKI and IRR consistency. Due to signal contradictions, the asset was classified as a Suspicious Host with a low severity recommendation to monitor for changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-ZPDX |
| CIDR Block | 44.224.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-44-231-252-146.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-44-231-252-146.us-west-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 2 — Moderate operator sophistication with routing hygiene |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungcloud.comsamsungcloud.com |
| Valid From | 2026-09-07T00:00:00+00:00 |
| Valid Until | 2027-03-24T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 7AFA9F14AE3DDA1FB02ADB5E78837276 |
| Thumbprint | AF00399B14B8835A96E0387655E1630BD2668B21 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 70% | 4 | 5 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 1 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 28% | 8 | 9 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-25 16:36:25 UTC |
| Last Seen | 2026-09-25 16:36:25 UTC |
| Profile Built | 2026-09-25 16:55:43 UTC |
| Data Freshness | Live |
| Signal Types | 33 |
| Total Observations | 33 |
Full dossier details are available via our API.