IP Intelligence Briefing: 3.252.196.227
Date: 2026-06-16
---
**1. Core Profile**
- Risk Score: 25 (Low Risk)
- Ownership: Amazon Data Services Ireland Limited (AS16509)
- Geolocation:
- Primary: United States (Newark, NJ)
- Conflicting signal: Dublin, Ireland (likely false positive or routing anomaly)
- Network Role: AWS infrastructure (no public services, firewalled)
- Threat Indicators: No malicious activity detected (no spam, attacks, or known badlists).
---
**2. Observation History**
- Recent Activity:
- 2026-06-16: Geolocation signal inferred to Dublin, Ireland (53.35°N, -6.26°W) with 56% confidence.
- 2026-06-13: No threat persistence or ownership changes noted.
- Consistency: No long-term malicious patterns.
---
**3. Relationships**
- Linked Entities:
- AWS EC2 hostname: `ec2-3-252-196-227.eu-west-1.compute.amazonaws.com`
- Subnet: `3.248.0.0/13` (Amazon-owned, no abuse density).
- No Associations: No ties to known malicious organizations, campaigns, or DNS blacklists.
---
**4. Neighborhood Analysis**
- Subnet: `3.252.196.227/24`
- Neighbor Risk: 0 abuse density; no risky sibling IPs detected.
- Network Stability: AWS infrastructure is likely stable and routable.
---
**5. Recommendations**
- Monitor: Watch for unexpected geolocation shifts or new threat signals (e.g., DNS changes).
- Whitelist: Confirm this IP is part of legitimate AWS infrastructure; no blocking required.
- Verify: Cross-check geolocation anomalies with AWS support if further investigation is needed.
---
Conclusion: 3.252.196.227 is a low-risk AWS server with no malicious indicators. The geolocation discrepancy may stem from routing or misconfigured DNS, but no actionable threats are present.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 3.248.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | ec2-3-252-196-227.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | ec2-3-252-196-227.eu-west-1.compute.amazonaws.com |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 21% | 2 | 2 |
| Overall | 22% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-06-06 07:27:34 UTC |
| Last Seen | 2026-06-21 12:56:37 UTC |
| Profile Built | 2026-06-21 13:16:31 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 29 |
Full dossier details are available via our API.