The asset 34.250.121.148/32 was identified within the AMAZON-DUB network, owned by Amazon Data Services Ireland Limited (ASN 16509). A risk assessment yielded a Low Risk score of 25. Geolocation data placed the host in Dublin, Ireland, though a TLS certificate subject indicated South Korea, creating a contradiction in geographic origin. Network services included TCP ports 80 and 443 with an Apache server banner. While the neighborhood analysis returned clean results with zero threat siblings, the threat actor classification labeled the host as Suspicious. Monitoring was recommended due to conflicting signal data regarding country of origin and certificate claims, despite no specific malicious indicators or active campaigns being detected during the observation window.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 34.248.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | ec2-34-250-121-148.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | ec2-34-250-121-148.eu-west-1.compute.amazonaws.com |
๐ DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 3/6 domains |
| DMARC | 3/6 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 6 domains |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Apache |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | *.samsungapps.comsamsungapps.com |
| Valid From | 2026-01-27T00:00:00+00:00 |
| Valid Until | 2027-02-27T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 064772DF706B47674722C1834FCBB1A6 |
| Thumbprint | EAD7059B63800BE769A6AE97EBE740532E38D9C9 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 38% | 4 | 5 |
| services | 38% | 2 | 5 |
| ownership | 35% | 3 | 5 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 3 |
| Overall | 33% | 14 | 27 |
| Data Coherence | Mixed Signals (68%) โ 2 contradiction(s) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
โ TLS certificate claims KR but primary geo says IE
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-29 10:38:19 UTC |
| Last Seen | 2026-09-22 14:52:36 UTC |
| Profile Built | 2026-09-22 15:04:46 UTC |
| Data Freshness | Live |
| Signal Types | 33 |
| Total Observations | 55 |
Full dossier details are available via our API.