52.92.237.194
Intelligence analysis identified 52.92.237.194 as an Amazon Web Services infrastructure asset within the Amazon Technologies Inc. (AS16509) network block. The address resolved to `s3-us-west-2-r-w.amazonaws.com` and functioned as an AmazonS3 web server listening on TCP ports 80 and 443.
The asset maintained a Low Risk reputation score of 25. Behavioral analysis recorded zero honeypot hits, WAF violations, or active campaigns. DNS hygiene was rated Fair with valid SPF and DMARC records present. However, the system appeared on one DNSBL list out of eight total checks.
Validation data presented a geolocation contradiction: the asset claimed a Portland, OR origin (US) but recorded a 127ms RTT against a minimum possible 159ms for the reported 7,950km distance. Control plane metrics indicated the route was not stable over the previous 30 days.
Analysts categorized the intent as Unknown due to insufficient data, though the network role was classified as Hosting. The intelligence team recommended continued monitoring due to signal contradictions and insufficient intent classification. No immediate firewall rules were required based on current threat indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AT-88-Z |
| CIDR Block | 52.84.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | s3-us-west-2-r-w.amazonaws.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | s3-us-west-2-r-w.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | AmazonS3 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.s3-us-west-2.amazonaws.com*.s3.amazonaws.coms3-control.us-west-2.amazonaws.com*.s3.dualstack.us-west-2.amazonaws.coms3-deprecated.us-west-2.amazonaws.coms3-control.dualstack.us-west-2.amazonaws.com*.s3-deprecated.us-west-2.amazonaws.coms3.amazonaws.coms3.dualstack.us-west-2.amazonaws.com*.s3-control.dualstack.us-west-2.amazonaws.com |
| Valid From | 2025-11-18T00:00:00+00:00 |
| Valid Until | 2026-10-30T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 346 days |
| Serial Number | 0F061457518182D12E2A6E2A1F0B6A58 |
| Thumbprint | F8A8052C6A4D1B65BBE8A25159D059B84184CB1E |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 1 | 2 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 14% | 6 | 8 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-05 09:07:29 UTC |
| Last Seen | 2026-09-25 14:25:42 UTC |
| Profile Built | 2026-09-25 14:40:13 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 27 |
Full dossier details are available via our API.