34.248.171.106
IP address 34.248.171.106 was identified as an Amazon Web Services EC2 instance within the AMAZON-DUB network (AS16509) operated by Amazon Data Services Ireland Limited. The infrastructure was geolocated to Dublin, Ireland, though the TLS certificate associated with the host was issued to Samsung Electronics Co., Ltd. in South Korea.
The address operated web services on ports 80 and 443. While the overall reputation risk score remained low at 25, the profile flagged contradictory signals regarding geographic origin, classifying the host as "Suspicious." No known campaigns, blacklists, or active attack indicators were associated with the IP. Behavioral analysis recorded zero honeypot hits or WAF violations during the observation window from September 5 to September 21, 2026. Due to the conflicting data sources, monitoring was recommended to observe for further configuration changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 34.248.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-34-248-171-106.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-34-248-171-106.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 4/4 domains |
| DMARC | 2/4 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.push.samsungosp.compush.samsungosp.com |
| Valid From | 2025-11-17T00:00:00+00:00 |
| Valid Until | 2026-12-18T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 163F914E35AFA5204EAE5DC0D06733D3 |
| Thumbprint | 1565E26D89D47C1A2980DCF56D0FCD39AC1E4E91 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 4 |
| Overall | 24% | 10 | 19 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says IE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-05 08:43:56 UTC |
| Last Seen | 2026-09-21 02:27:51 UTC |
| Profile Built | 2026-09-21 02:43:59 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 44 |
Full dossier details are available via our API.