52.36.238.180
Intelligence Briefing: IP 52.36.238.180
The IP address 52.36.238.180 was identified as a cloud computing resource owned by Amazon Technologies Inc. (ASN 16509) within the us-west-2 region (Portland, OR). Network reconnaissance confirmed the infrastructure operated as an AWS Load Balancer with ports 80 and 443 open. Forward DNS resolution mapped the address to ec2-52-36-238-180.us-west-2.compute.amazonaws.com, and TLS analysis associated the certificate with the subject CN=ui-p-nimbus-prod.a.uidev.tools.
Threat assessment returned a risk score of 25, classified as Low Risk. No threat indicators were associated with the address, including known campaigns, spam sources, or Tor exit nodes. The surrounding neighborhood was classified as clean with an abuse density of 0. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations. While one DNSBL listing appeared within control plane metrics, the overall blacklist count remained at 0. The operator score was rated as Minimal.
The system recommendation was to Monitor the asset due to its location in a clean neighborhood. The profile confidence level was Very Low, and the host was determined not to be persistently malicious.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AT-88-Z |
| CIDR Block | 52.0.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-52-36-238-180.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-52-36-238-180.us-west-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | awselb/2.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | ui-p-nimbus-prod.a.uidev.tools*.ui-p-nimbus-prod.a.uidev.tools |
| Valid From | 2026-08-26T00:00:00+00:00 |
| Valid Until | 2027-03-11T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 0658A0285C27972D772DD387F59EDC0B |
| Thumbprint | 3D1CE102A46AC57525D9FD41BAE53DF385BFC1B0 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-09 06:06:46 UTC |
| Last Seen | 2026-09-09 06:06:46 UTC |
| Profile Built | 2026-09-09 06:18:13 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.