52.18.200.194
IP 52.18.200.194/32 was identified as an Amazon Web Services infrastructure host associated with Amazon Data Services Ireland Limited (ASN 16509). Observations indicate the system functions as a Web Server operating in Dublin, IE, though geographic data sources presented contradictions between Ireland and the United States. The host presented TLS certificates issued by Netflix Inc for internal logging services while maintaining an overall reputation score of 25 (Low Risk). Despite a low abuse confidence score and zero known active attacks, the asset was flagged on one DNSBL out of eight scanned lists. Behavioral analysis recorded no honeypot hits or enumeration strikes. Due to mixed signals regarding geolocation and certificate attribution, the asset was recommended for monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 52.16.0.0/14 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-52-18-200-194.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-52-18-200-194.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | envoy |
| HTTP Title | — |
🔐 TLS Certificate
SERIALNUMBER=i-0313c09a4a926cad3, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | logging.apiproxy.eu-west-1.prod.netflix.netlogging.apiproxy.netflix.netapiproxy.app.eu-west-1.prod.cloud.netflix.netapiproxy.netflix.netapiproxy-logging.eu-west-1.prod.netflix.netapiproxy-logging.dynprod.netflix.netlogging.apiproxy.dynprod.netflix.netapiproxy-logging.prod.netflix.netapiproxy.eu-west-1.dynprod.netflix.netapiproxy.eu-west-1.prod.netflix.net |
| Valid From | 2026-09-07T05:53:10+00:00 |
| Valid Until | 2026-09-14T06:53:10+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256ECDSA |
| Validity Period | 7 days |
| Serial Number | 01BE66B77044274E738CAB7C2C83FF51B7D8 |
| Thumbprint | 6CF10DCD3A3133DF9C6A63EB6FD888FEFD84CE6B |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 26% | 10 | 17 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims US but primary geo says IE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 07:16:29 UTC |
| Last Seen | 2026-09-15 04:11:01 UTC |
| Profile Built | 2026-09-15 04:17:10 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 33 |
Full dossier details are available via our API.