44.253.232.249
Intelligence briefing for 44.253.232.249:
The IP address was owned by Amazon.com, Inc. (ASN 16509) under the AMAZO-ZPDX netname. PTR resolution returned ec2-44-253-232-249.us-west-2.compute.amazonaws.com, confirming an EC2 instance in the us-west-2 region.
Port 443 (HTTPS) was active. The TLS certificate subject was samsungcloud.com, issued by Sectigo Public Server Authentication CA OV R36.
Geolocation data indicated the United States (Boardman, OR), though the TLS certificate country code was KR. These discrepancies contributed to a "Mixed Signals" coherence score of 68. The overall risk score was 25 (Low Risk), but the host was classified as a Suspicious Host with a confidence label of Very Low.
No specific known campaigns or active attacker indicators were associated with the address. Due to signal contradictions, the recommended action was to Monitor the asset at low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-ZPDX |
| CIDR Block | 44.224.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-44-253-232-249.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-44-253-232-249.us-west-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungcloud.comsamsungcloud.com |
| Valid From | 2026-09-07T00:00:00+00:00 |
| Valid Until | 2027-03-24T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 7AFA9F14AE3DDA1FB02ADB5E78837276 |
| Thumbprint | AF00399B14B8835A96E0387655E1630BD2668B21 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 20% | 1 | 1 |
| services | 40% | 2 | 3 |
| ownership | 40% | 2 | 3 |
| reputation | 20% | 1 | 2 |
| geolocation | 40% | 2 | 3 |
| Overall | 33% | 10 | 15 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-20 09:48:56 UTC |
| Last Seen | 2026-09-22 07:43:42 UTC |
| Profile Built | 2026-09-23 09:59:38 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 38 |
Full dossier details are available via our API.