54.212.187.152
Intelligence analysis identified IP address 54.212.187.152 as a low-risk endpoint with a risk score of 25. Ownership records indicated Amazon.com, Inc. under the organization AMAZO-ZPDX5 within ASN 16509. Geolocation data placed the host in Portland, OR, United States. The infrastructure functioned as a web server hosting HTTP and HTTPS traffic on ports 80 and 443. DNS resolution confirmed the PTR hostname ec2-54-212-187-152.us-west-2.compute.amazonaws.com, and the TLS certificate was issued by Amazon RSA 2048 M04 for the domain *.samsungdacmp.net.
Threat indicators remained absent, and the address was not associated with known attacker campaigns or spam sources. Control plane checks listed the IP on one DNS blacklist. Behavioral metrics recorded zero honeypot hits and zero enumeration strikes. While the threat actor profile labeled the host as Suspicious, the neighborhood classification remained clean with zero threat siblings. The overall reputation assessment remained low risk. Operational guidance recommended monitoring the address with low severity due to its clean neighborhood classification. Data observations confirmed the IP as live.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-ZPDX5 |
| CIDR Block | 54.212.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-54-212-187-152.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-54-212-187-152.us-west-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungdacmp.netsamsungdacmp.net |
| Valid From | 2026-10-04T00:00:00+00:00 |
| Valid Until | 2027-04-19T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
🛡️ Public Network Snapshot
| Origin ASN | AS16509 |
| Network Prefix | 54.212.0.0/16 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 50% | 2 | 3 |
| ownership | 50% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 29% | 7 | 9 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-12 08:02:44 UTC |
| Last Seen | 2026-10-12 08:02:44 UTC |
| Profile Built | 2026-10-12 08:25:42 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 54.212.187.152
Who owns the IP address 54.212.187.152?
54.212.187.152 is registered to Amazon.com, Inc.. The address falls within the 54.212.0.0/15 network block. Registration is held at ARIN.
Where is 54.212.187.152 located?
Geolocation data places 54.212.187.152 in Portland, OR, United States. The local time zone is America/Los_Angeles. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 54.212.187.152 malicious or safe?
54.212.187.152 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 54.212.187.152?
The reverse DNS (PTR) record for 54.212.187.152 is ec2-54-212-187-152.us-west-2.compute.amazonaws.com. This hostname is forward-confirmed, meaning it resolves back to the same address.
What ports are open on 54.212.187.152?
Responsive ports observed on 54.212.187.152 include 80, 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.