44.252.209.95
Intelligence analysis identified IP address 44.252.209.95 as Amazon Web Services (AWS) infrastructure associated with ASN 16509 (Amazon.com, Inc.). The asset resolved to the hostname ec2-44-252-209-95.us-west-2.compute.amazonaws.com and was geolocated to Portland, OR. Network scanning detected open TCP ports 80 and 443, returning a server banner of awselb/2.0. TLS certificate inspection revealed a certificate issued by Amazon RSA 2048 M01 for ui-p-nimbus-prod.a.uidev.tools. Threat intelligence feeds did not flag the address on known blacklists, and no attack campaigns or malicious behavior were associated with the IP. Behavioral analysis recorded zero honeypot hits and zero incidents over the observation window from September 20 to September 27. The address resided within a clean neighborhood classification with no threat siblings. Risk assessment assigned a Low Risk reputation score of 25. Analysts recommended Monitor status with low severity due to the clean infrastructure profile and lack of malicious indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-ZPDX |
| CIDR Block | 44.224.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-44-252-209-95.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-44-252-209-95.us-west-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/3 domains |
| DMARC | 2/3 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 3 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | awselb/2.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | ui-p-nimbus-prod.a.uidev.tools*.ui-p-nimbus-prod.a.uidev.tools |
| Valid From | 2026-08-26T00:00:00+00:00 |
| Valid Until | 2027-03-11T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 0658A0285C27972D772DD387F59EDC0B |
| Thumbprint | 3D1CE102A46AC57525D9FD41BAE53DF385BFC1B0 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 19% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 24% | 9 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-20 13:46:28 UTC |
| Last Seen | 2026-09-27 14:12:01 UTC |
| Profile Built | 2026-09-27 14:24:40 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 30 |
Full dossier details are available via our API.