52.92.240.170
The IP address 52.92.240.170 was classified as Low Risk with a risk score of 20. Ownership attribution linked the endpoint to Amazon Technologies Inc. (AS16509) within the 52.84.0.0/14 block. Geolocation data assigned the asset to Portland, Oregon, though RTT physics measurements contradicted this placement, recording a 7950km distance against an observed minimum possible RTT of 159ms versus 86ms. Network activity identified the host as a web server running Amazon S3 services on ports 80 and 443. DNS resolution returned s3-us-west-2-r-w.amazonaws.com with a valid TLS certificate issued by Amazon. Threat indicators showed no known campaigns, blacklists, or active attacker associations. Behavioral analysis reported zero honeypot hits or enumeration strikes. Despite the clean threat profile, the presence of signal contradictions warranted a low-severity monitor recommendation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AT-88-Z |
| CIDR Block | 52.84.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | s3-us-west-2-r-w.amazonaws.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | s3-us-west-2-r-w.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | AmazonS3 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.s3-us-west-2.amazonaws.com*.s3.amazonaws.coms3-control.us-west-2.amazonaws.com*.s3.dualstack.us-west-2.amazonaws.coms3-deprecated.us-west-2.amazonaws.coms3-control.dualstack.us-west-2.amazonaws.com*.s3-deprecated.us-west-2.amazonaws.coms3.amazonaws.coms3.dualstack.us-west-2.amazonaws.com*.s3-control.dualstack.us-west-2.amazonaws.com |
| Valid From | 2025-11-18T00:00:00+00:00 |
| Valid Until | 2026-10-30T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 346 days |
| Serial Number | 0F061457518182D12E2A6E2A1F0B6A58 |
| Thumbprint | F8A8052C6A4D1B65BBE8A25159D059B84184CB1E |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 35% | 2 | 3 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 29% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-08 10:32:56 UTC |
| Last Seen | 2026-09-13 07:28:05 UTC |
| Profile Built | 2026-09-13 07:36:55 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 29 |
Full dossier details are available via our API.