Intelligence Briefing: 52.212.125.71/32
Target Identification:
The IP address 52.212.125.71/32 is attributed to Amazon Data Services Ireland Limited (Amazon Web Services) within the AMAZON-DUB network (52.208.0.0/13). Geolocation data places the infrastructure in Dublin, Ireland (eu-west-1). DNS resolution confirms the endpoint hostname as ec2-52-212-125-71.eu-west-1.compute.amazonaws.com.
Threat Posture:
The system is classified as "Low Risk" with a risk score of 25. The threat actor label designates the host as "Suspicious Host" due to the presence of threat indicators without specific classification, though the threat indicators list remains empty. No blacklists were recorded, and the neighborhood abuse density is 0. Behavioral analysis reported zero honeypot hits, enumeration strikes, or active incidents. No open ports, TLS certificates, or active services were detected during the observation window.
Temporal Data:
Observations range from 2026-08-29 to 2026-09-19. The threat persistence duration is recorded at 0 days.
Recommendation:
Monitor. The address is situated in a clean neighborhood with minimal operator risk. No firewall rules are recommended at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 52.208.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | ec2-52-212-125-71.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | ec2-52-212-125-71.eu-west-1.compute.amazonaws.com |
๐ DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) โ 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-29 12:59:12 UTC |
| Last Seen | 2026-09-26 17:55:50 UTC |
| Profile Built | 2026-09-26 18:01:51 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 33 |
Full dossier details are available via our API.