Intelligence Briefing: IP 52.87.60.126/32
Overview:
IP address 52.87.60.126/32 was analyzed using a range of intelligence tools to gather comprehensive data on its profile, observation history, relationships, and neighborhood data.
Profile:
- Ownership and Hosting: The IP address 52.87.60.126/32 is owned by Amazon, Inc. It is part of the Amazon Elastic Compute Cloud (EC2) infrastructure, indicating that it is used for hosting services on AWS.
- Service Type: The address is associated with hosting services, commonly used for web applications, cloud services, or other hosted applications provided by customers utilizing Amazon's AWS infrastructure.
Observation History:
- Historical Data: Historical analysis indicates consistent use as a hosting service with no significant changes in activity patterns that would suggest malicious behavior.
- Threat Intelligence Data: No current threat intelligence reports associate this IP with malicious activities. It has not been flagged in known threat databases or blacklists.
Relationships:
- Associated Domains: Several domains are hosted on this IP, including both legitimate business websites and potentially less scrutinized personal or small business sites.
- Traffic Patterns: Traffic analysis shows typical hosting patterns, with regular inbound and outbound traffic consistent with web hosting and application service use.
Neighborhood Data:
- Network Analysis: The IP address is part of a larger network block allocated to Amazon's EC2 services. Neighboring IPs are also used for similar hosting and cloud service purposes.
- Geolocation: The IP is geolocated to the United States, aligning with Amazon's data center locations.
Conclusion:
The IP address 52.87.60.126/32 is a legitimate hosting service within Amazon's AWS infrastructure. It is used for a range of hosting applications with no current evidence of malicious activity. Continued monitoring for unusual traffic patterns or associations with known threat actors is recommended, but the address itself poses no immediate threat based on available data.
Recommendations:
- Monitoring: Continue to monitor traffic for any anomalies that deviate from expected hosting patterns.
- Validation: Verify any domains or applications hosted on this IP to ensure they are legitimate and not compromised.
- Incident Response: Be prepared to investigate if any future threat intelligence reports associate this IP with malicious activities.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | mail.emailverifypro.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | mail.emailverifypro.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.28.2 |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_8.7 |
π TLS Certificate
| SANs | emailverifypro.comwww.emailverifypro.com |
| Valid From | 2026-04-19T10:07:36+00:00 |
| Valid Until | 2026-07-18T10:07:35+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 060B7AD5FF8E0909E7744DE9DE28813F4C08 |
| Thumbprint | D8B4E5BB274F546C91CE7018C1A7D2A05205BED2 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 4 |
| routing | 53% | 1 | 24 |
| services | 30% | 2 | 3 |
| ownership | 20% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 30% | 10 | 40 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-07 23:04:27 UTC |
| Last Seen | 2026-06-27 07:43:41 UTC |
| Profile Built | 2026-06-28 01:49:34 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 50 |
Full dossier details are available via our API.