108.131.174.238
Intelligence Briefing: 108.131.174.238/32
The IP address 108.131.174.238 is assigned to Amazon Data Services Ireland Limited (ASN 16509) and operates as a web server within Amazon Web Services infrastructure. Geolocation data places the resource in Dublin, Ireland, though conflicting signals indicate potential origins in Great Britain and South Korea. The TLS certificate subject identifies the organization as Samsung Electronics CO., LTD. (Suwon-si, South Korea).
Technical analysis confirms an HTTPS service on port 443 with a PTR hostname resolving to ec2-108-131-174-238.eu-west-1.compute.amazonaws.com. DNS hygiene is rated Good, with SPF and DMARC records validated. The subnet 108.131.174.238/24 is classified as clean with zero abuse density.
Threat intelligence indicators assign a Low Risk classification with a risk score of 0. No indicators of compromise, active campaigns, or blacklist entries were observed. Behavioral analysis recorded zero incidents and no known attacker activity.
Recommendation: Monitor the IP address due to signal contradictions regarding geolocation and certificate origin.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 108.128.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-108-131-174-238.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-108-131-174-238.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungcloud.tvsamsungcloud.tv |
| Valid From | 2026-07-15T00:00:00+00:00 |
| Valid Until | 2027-01-29T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 06D54C652EF74E38C30C783504A6CB83 |
| Thumbprint | B0A2CA461C07439524176DFEE423392DF637B3FD |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 2 |
| routing | 20% | 1 | 1 |
| services | 31% | 2 | 2 |
| ownership | 50% | 2 | 3 |
| reputation | 25% | 1 | 1 |
| geolocation | 35% | 2 | 2 |
| Overall | 32% | 10 | 11 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says IE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-03 13:40:42 UTC |
| Last Seen | 2026-09-05 05:33:16 UTC |
| Profile Built | 2026-09-05 05:54:54 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 25 |
Full dossier details are available via our API.