52.26.82.156
The profile identified IP 52.26.82.156 as a Low Risk host with a risk score of 25. Ownership records attributed the address to Amazon Technologies Inc. (ASN 16509) within the AT-88-Z block. Geolocation data placed the infrastructure in Portland, Oregon, though conflicting sources indicated South Korea. Network analysis confirmed the endpoint hosted HTTPS traffic on TCP port 443, utilizing a TLS certificate for samsungcloud.com issued by Sectigo. While the endpoint was not flagged as a known attacker or spam source, it appeared on one DNS blacklist among eight total checks. Behavioral analysis recorded no enumeration strikes or honeypot hits. The profile indicated mixed signal coherence due to geographic discrepancies, resulting in a recommendation to monitor the asset for changes
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AT-88-Z |
| CIDR Block | 52.0.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-52-26-82-156.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-52-26-82-156.us-west-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 1/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungcloud.comsamsungcloud.com |
| Valid From | 2026-03-13T00:00:00+00:00 |
| Valid Until | 2026-09-27T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 00F405307E43CED6E95FD2C2DC61241722 |
| Thumbprint | 553F19DE95AB398DA86102FC2A332712DBC20858 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 17 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-09 07:00:03 UTC |
| Last Seen | 2026-09-16 23:43:14 UTC |
| Profile Built | 2026-09-16 23:57:17 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 30 |
Full dossier details are available via our API.