108.128.5.249
Intelligence analysis classified IP 108.128.5.249 as low-risk infrastructure belonging to Amazon Data Services Ireland Limited (ASN 16509). The address resolved to an EC2 instance within the eu-west-1 region, confirmed via forward and reverse DNS records. Threat intelligence feeds returned no indicators of compromise, and the address was not listed on any known blacklists or associated with active campaigns. Network scanning indicated the service was firewalled with no open ports.
Minor data inconsistencies were recorded regarding geolocation sources, which disagreed on country assignment between Ireland and Great Britain. The immediate subnet showed a clean classification with zero abuse density. No malicious behavior, such as honeypot hits or enumeration strikes, was observed.
Due to signal contradictions present in the data, the analysis recommended monitoring the address at low severity. No immediate firewall rules were required based on the current profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 108.128.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-108-128-5-249.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-108-128-5-249.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 8 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 33% | 2 | 5 |
| Overall | 26% | 10 | 25 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-01 04:09:12 UTC |
| Last Seen | 2026-09-25 05:27:25 UTC |
| Profile Built | 2026-09-25 05:37:14 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 45 |
Full dossier details are available via our API.