52.202.20.72 is an IPv4 address operated by AMAZON-AES - Amazon.com, Inc., US (AS14618), with approximate network location Ashburn, United States. As of November 13, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.
Witness AI IP Assessment (AI-generated)
AI-generated assessment. Verify critical details independently.
Intellectual Property Debrief Intelligence Briefing
Target Host: 52.202.20.72/32
Risk Score: 0
Network Attribution and Infrastructure
The host address 52.202.20.72 resides within the address block 52.192.0.0/12, registered to Amazon Technologies Inc. (Amazon Web Services) under Autonomous System 14618. Geolocation data associates the network with Ashburn, Virginia, United States. While the infrastructure type is listed as unknown, the network role identifies the provider as Amazon Web Services with a service purpose of "Web Server." Anycast status remains unverified.
DNS and Security Hygiene
No DNS hygiene assessments were performed on the target; consequently, checks for CAA, SPF, DMARC, and DNSSEC returned status values of "unknown" or "not_checked." These results indicate a lack of evaluated records rather than confirmed absence or misconfiguration.
TLS Observations
A single TLS probe was conducted, yielding a historical certificate status. The endpoint presented a certificate issued by "CN=Amazon RSA 2048 M01, O=Amazon, C=US" for the subject "CN=gitkraken.com," covering the domain "gitkraken.com" and its wildcard variant. The certificate validity period spans from June 29, 2026, to January 12, 2027. This finding describes a specific certificate probe result and does not establish live service validity or current operational status for the probed domain.
Operational Recommendation
Given the limited scope of tool observations and the absence of active TLS validation or DNS hygiene checks, no definitive conclusion regarding malicious activity or specific service function can be drawn. Continuous monitoring and corroboration of current service states are recommended.
🏢 Ownership & Registration
| Registered holder | Amazon Technologies Inc. |
| ASN | AS14618 |
| Network Name | AT-88-Z |
| CIDR Block | 52.192.0.0/12 |
| RIR | ARIN |
| Network registration country | United States |
| Routing operator | AMAZON-AES - Amazon.com, Inc., US |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
DNS Posture
Results describe the queried names. SPF, DMARC and CAA are domain policies, not requirements for every IP. DNSSEC here describes reverse DNS; inconclusive validation does not mean unsigned.
Not assessed: 0 conclusive IP DNS checks.
| caa | Unknown / lookup inconclusive amazonaws.com |
| spf | Not checked |
| dmarc | Not checked |
| dnssec | Unknown / lookup inconclusive 72.20.202.52.in-addr.arpa |
| fcrDns | Not checked |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| Port | Probe target | Certificate finding |
|---|---|---|
| (IP-targeted) | CN=gitkraken.com Historical certificate; current certificate unknown |
| SANs | gitkraken.com*.gitkraken.com |
| Valid From | 2026-06-29T00:00:00+00:00 |
| Valid Until | 2027-01-12T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
🛡️ Public Network Snapshot
| Origin ASN | AS14618 |
| Network Prefix | 52.200.0.0/13 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Recent
| First Seen | 2026-11-09 03:45:10 UTC |
| Last Seen | 2026-11-14 12:59:14 UTC |
| Profile Built | 2026-11-13 09:31:05 UTC |
| Data Freshness | Recent |
| Signal Types | 25 |
| Total Observations | 25 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 52.202.20.72
Who owns the IP address 52.202.20.72?
52.202.20.72 is registered to Amazon Technologies Inc.. The address falls within the 52.192.0.0/12 network block. Registration is held at ARIN.
Where is 52.202.20.72 located?
Geolocation data places 52.202.20.72 in Ashburn, VA, United States. The local time zone is America/New_York. IP geolocation is approximate, not a precise physical address. Registration country and certificate organization addresses do not establish service location.
Is 52.202.20.72 malicious or safe?
52.202.20.72 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 52.202.20.72?
Responsive ports observed on 52.202.20.72 include 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.