54.71.159.33
Intelligence briefing for IP 54.71.159.33/32. The address was registered to Amazon Technologies Inc. under the AMAZON-2011L netname and ASN 16509. Ownership records and geolocation data primarily identified the United States, specifically Boardman, OR, though TLS certificate metadata indicated South Korea. The IP operated as a web server within the Amazon Web Services cloud environment, resolving to ec2-54-71-159-33.us-west-2.compute.amazonaws.com.
Threat indicators showed a low-risk reputation score of 0 with zero blacklist entries and no known attacker associations. Behavioral logs recorded no honeypot hits, enumeration strikes, or WAF violations. The control plane maintained valid RPKI state and IRR consistency. Despite a clean subnet classification with zero abuse density, signal coherence was rated mixed due to conflicting geo-validation and certificate subject data. The system returned a 404 status on HTTP probes. Recommendations indicated a monitor status due to the presence of signal contradictions despite the overall clean reputation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-2011L |
| CIDR Block | 54.64.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-54-71-159-33.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-54-71-159-33.us-west-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 1/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 2 — Moderate operator sophistication with routing hygiene |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
CN=*.samsungcloud.com, O="SAMSUNG ELECTRONICS CO,.LTD", S=Gyeonggi-do, C=KR was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | *.samsungcloud.comsamsungcloud.com |
| Valid From | 2026-03-13T00:00:00+00:00 |
| Valid Until | 2026-09-27T23:59:59+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 7AFA9F14AE3DDA1FB02ADB5E78837276 |
| Thumbprint | AF00399B14B8835A96E0387655E1630BD2668B21 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 63% | 4 | 5 |
| services | 43% | 2 | 5 |
| ownership | 36% | 3 | 4 |
| reputation | 13% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 34% | 14 | 21 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-09 11:45:52 UTC |
| Last Seen | 2026-09-17 07:04:14 UTC |
| Profile Built | 2026-09-17 07:13:01 UTC |
| Data Freshness | Live |
| Signal Types | 32 |
| Total Observations | 39 |
Full dossier details are available via our API.