# 52.85.30.117 — IP Intelligence Summary

52.85.30.117 is an IPv4 address operated by Amazon.com, Inc. (AS16509), geolocated to New York, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name server-52-85-30-117.jfk50.r.cloudfront.net. As of October 31, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/52.85.30.117
- Last updated: 2026-10-31

## Ownership

- Organization: Amazon.com, Inc.
- Network name: AMAZO-CF
- Allocated block: 52.84.0.0/15
- ASN: AS16509 (https://ipdebrief.com/asn/16509)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: New York
- Region: US-NY
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: —
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- server-52-85-30-117.jfk50.r.cloudfront.net
- Forward-confirmed: no

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

Intelligence analysis identified IP 52.85.30.117/32 as infrastructure associated with Amazon Web Services CloudFront, registered under ASN 16509 to Amazon.com, Inc. Geolocation consensus placed the host in New York, US. Risk assessment categorized the address as Low Risk with a score of 25. No active threat indicators were recorded; the IP was not listed on blacklists, was not associated with known campaigns, and showed no signs of malicious behavior such as honeypot hits. Network scans confirmed standard HTTP and HTTPS services on ports 80 and 443, served via an Amazon RSA 2048 M04 TLS certificate.

Technical validation highlighted a geolocation inconsistency. The system recorded a Round-Trip Time (RTT) of 21ms against a probe distance of 7625.7km, whereas the data indicated a minimum possible RTT of 152.5ms for that distance. This contradiction marked a signal anomaly within the profile. The address showed no malicious behavioral strikes, including zero enumeration strikes or WAF violations.

Despite the low-risk classification, the presence of signal contradictions prompted a recommendation to monitor the address for changes. The profile maintained a live status with observations spanning from September 30, 2026, to October 31, 2026.

## Nearby addresses

- 52.85.30.3 (https://ipdebrief.com/52.85.30.3)
- 52.85.30.62 (https://ipdebrief.com/52.85.30.62)
- 52.85.30.64 (https://ipdebrief.com/52.85.30.64)
- 52.85.30.74 (https://ipdebrief.com/52.85.30.74)
- 52.85.30.87 (https://ipdebrief.com/52.85.30.87)
- 52.85.30.93 (https://ipdebrief.com/52.85.30.93)
- 52.85.30.104 (https://ipdebrief.com/52.85.30.104)
- 52.85.30.165 (https://ipdebrief.com/52.85.30.165)
- 52.85.30.171 (https://ipdebrief.com/52.85.30.171)
- 52.85.30.187 (https://ipdebrief.com/52.85.30.187)
- 52.85.30.195 (https://ipdebrief.com/52.85.30.195)
- 52.85.30.196 (https://ipdebrief.com/52.85.30.196)

---

Source: IPDebrief, "52.85.30.117 IP intelligence", https://ipdebrief.com/52.85.30.117, updated 2026-10-31. Assessments are probabilistic.