34.252.110.18
The IP address 34.252.110.18 was identified as a low-risk endpoint associated with Amazon Web Services (ASN 16509) in Dublin, Ireland. Network scans confirmed an active HTTPS service on port 443. While the primary geolocation placed the infrastructure in Ireland, the TLS certificate belonged to Samsung Electronics Co., Ltd. (samsungcloud.tv), creating a significant data contradiction.
Threat intelligence assessments returned a risk score of 25 with zero known attacker indicators and no blacklist hits. However, the control plane data indicated one DNSBL listing across eight lists, resulting in a "Suspicious Host" classification. Neighborhood analysis classified the subnet 34.252.110.18/24 as clean with an abuse density of 0.
Operational recommendations indicated the need to monitor the asset due to signal contradictions. Behavioral analysis showed no enumeration strikes or persistent malicious activity. Confidence levels remained very low (0.2667) due to insufficient data to classify intent definitively.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 34.248.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-34-252-110-18.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-34-252-110-18.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungcloud.tvsamsungcloud.tv |
| Valid From | 2026-07-15T00:00:00+00:00 |
| Valid Until | 2027-01-29T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 06D54C652EF74E38C30C783504A6CB83 |
| Thumbprint | B0A2CA461C07439524176DFEE423392DF637B3FD |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 50% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 26% | 7 | 8 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says IE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-20 20:49:34 UTC |
| Last Seen | 2026-09-20 20:49:34 UTC |
| Profile Built | 2026-09-20 21:04:28 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 25 |
Full dossier details are available via our API.