IP address 34.249.98.13 was identified as Amazon Web Services infrastructure, specifically an EC2 instance under Amazon Data Services Ireland Limited (ASN 16509). During the observation window, the asset presented a low-risk profile with a risk score of 0 and was not associated with known attack campaigns, spam, or abuse lists. DNS resolution confirmed the hostname ec2-34-249-98-13.eu-west-1.compute.amazonaws.com, while TLS certificate analysis indicated usage by Samsung Electronics (CN=*.push.samsungosp.com). Open ports 80 and 443 were active, consistent with web server infrastructure.
Intelligence gathering identified signal contradictions regarding geolocation and certificate origin. While the primary location was Dublin, Ireland, other geo sources cited Korea and the United Kingdom, and the TLS certificate subject country (KR) conflicted with the server's hosted region (IE). Neighborhood analysis classified the subnet as mostly clean, though one threat sibling was recorded. No persistent malicious activity or incidents were observed during the monitoring period. Consequently, the recommendation was to monitor the asset at low severity due to data inconsistencies, despite the absence of active attacker behavior.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 34.248.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | ec2-34-249-98-13.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | ec2-34-249-98-13.eu-west-1.compute.amazonaws.com |
๐ DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 4/4 domains |
| DMARC | 2/4 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 4 domains |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | *.push.samsungosp.compush.samsungosp.com |
| Valid From | 2025-11-17T00:00:00+00:00 |
| Valid Until | 2026-12-18T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 163F914E35AFA5204EAE5DC0D06733D3 |
| Thumbprint | 1565E26D89D47C1A2980DCF56D0FCD39AC1E4E91 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 4 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 2 |
| Overall | 26% | 10 | 21 |
| Data Coherence | Mixed Signals (68%) โ 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
โ TLS certificate claims KR but primary geo says IE
๐ Observation Timeline ๐ Live
| First Seen | 2026-09-07 04:29:29 UTC |
| Last Seen | 2026-09-22 22:43:02 UTC |
| Profile Built | 2026-09-23 00:06:19 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 45 |
Full dossier details are available via our API.