52.217.87.144
52.217.87.144 is an IPv4 address operated by AMAZON-02 - Amazon.com, Inc., US (AS16509), with approximate network location Ashburn, United States. As of November 13, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.
Witness AI IP Assessment (AI-generated)
AI-generated assessment. Verify critical details independently.
Intellective Briefing: 52.217.87.144
Target Identification and Ownership
The host address 52.217.87.144/32 is associated with Amazon Web Services (AWS) under the routing operator AMAZON-02. The network block 52.192.0.0/12 is registered to Amazon Technologies Inc. (NetName: AT-88-Z) within the ARIN region. Geolocation data places the approximate network location in Ashburn, Virginia, United States.
Infrastructure and Role
Network role analysis identifies the infrastructure as a Web Server hosted within the United States. Observations indicate the host operates as part of the AWS provider ecosystem. Current assessments do not confirm the address as a CDN, VPN, proxy, Tor node, mobile, residential, or hosting service. The anycast status remains unverified.
Security Posture and Hygiene
DNS hygiene checks for SPF, DMARC, CAA, DNSSEC, and FCR-DNS were not assessed, resulting in a zero score and a "Not assessed" label. The absence of these checks does not establish a lack of security controls. No bogon status or residential/mobile characteristics were detected.
TLS and Certificate Observations
A TLS probe returned a historical certificate for the subject CN=s3.amazonaws.com. The certificate, issued by "CN=Amazon RSA 2048 M01, O=Amazon, C=US," covers the S3 service endpoints including s3.amazonaws.com and various regional access points for us-east-1. The validity period spans from September 20, 2026, to April 5, 2027. The probe status is marked as unknown, and the certificate is flagged as stale, indicating the probe did not retrieve a live certificate or the target does not respond to TLS handshakes at the probed moment.
Risk Assessment
The calculated risk score is zero. However, this metric reflects the absence of detected malicious indicators or failed probes rather than a definitive confirmation of benign activity. The limited scope of DNS hygiene checks and the stale TLS probe result in inconclusive evidence regarding active service validation.
Recommendation
Given the association with a major cloud provider and the lack of conflicting malicious indicators, the address presents a standard risk profile for AWS infrastructure. Continued monitoring is recommended to corroborate service activity, particularly in light of the stale TLS probe results and unverified anycast status.
🏢 Ownership & Registration
| Registered holder | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AT-88-Z |
| CIDR Block | 52.192.0.0/12 |
| RIR | ARIN |
| Network registration country | United States |
| Routing operator | AMAZON-02 - Amazon.com, Inc., US |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
DNS Posture
Results describe the queried names. SPF, DMARC and CAA are domain policies, not requirements for every IP. DNSSEC here describes reverse DNS; inconclusive validation does not mean unsigned.
Not assessed: 0 conclusive IP DNS checks.
| caa | Not checked |
| spf | Not checked |
| dmarc | Not checked |
| dnssec | Not checked |
| fcrDns | Not checked |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| Port | Probe target | Certificate finding |
|---|---|---|
| (IP-targeted) | CN=s3.amazonaws.com Historical certificate; current certificate unknown |
| SANs | s3.amazonaws.com*.s3.amazonaws.com*.s3-accesspoint.us-east-1.amazonaws.com*.s3-control.us-east-1.amazonaws.coms3.dualstack.us-east-1.amazonaws.com*.s3-external-2.amazonaws.coms3-control.dualstack.us-east-1.amazonaws.com*.s3-deprecated.us-east-1.amazonaws.com*.s3-accesspoint.dualstack.us-east-1.amazonaws.coms3.us-east-1.amazonaws.com |
| Valid From | 2026-09-20T00:00:00+00:00 |
| Valid Until | 2027-04-05T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
🛡️ Public Network Snapshot
| Origin ASN | AS16509 |
| Network Prefix | 52.217.80.0/20 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Aging
| First Seen | 2026-10-25 23:31:05 UTC |
| Last Seen | 2026-11-14 13:38:37 UTC |
| Profile Built | 2026-11-13 05:12:10 UTC |
| Data Freshness | Aging |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 52.217.87.144
Who owns the IP address 52.217.87.144?
52.217.87.144 is registered to Amazon Technologies Inc.. The address falls within the 52.192.0.0/12 network block. Registration is held at ARIN.
Where is 52.217.87.144 located?
Geolocation data places 52.217.87.144 in Ashburn, VA, United States. The local time zone is America/New_York. IP geolocation is approximate, not a precise physical address. Registration country and certificate organization addresses do not establish service location.
Is 52.217.87.144 malicious or safe?
52.217.87.144 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 52.217.87.144?
Responsive ports observed on 52.217.87.144 include 80, 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.