52.49.80.76
Intelligence gathered for IP 52.49.80.76/32 identified the endpoint as an Amazon Web Services infrastructure asset operated by Amazon Data Services Ireland Limited (ASN 16509). Observations recorded the system hosting web services on ports 80 and 443 with an Apache server banner. DNS resolution confirmed the PTR hostname as ec2-52-49-80-76.eu-west-1.compute.amazonaws.com, while TLS certificate validation indicated a subject CN=*.samsungapps.com registered in South Korea.
The IP maintained a Low Risk reputation score of 25 with no confirmed abuse indicators or known campaign associations. However, data analysis highlighted signal contradictions regarding geolocation, with sources disagreeing between Ireland, Great Britain, and South Korea, despite the certificate subject country claiming South Korea. Behavioral metrics recorded zero enumeration strikes or WAF violations. The overall assessment remained a Low Risk rating with a recommendation to monitor due to conflicting geographic and certificate data.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 52.48.0.0/14 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-52-49-80-76.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-52-49-80-76.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 1/2 domains |
| DMARC | 1/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Apache |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungapps.comsamsungapps.com |
| Valid From | 2026-01-27T00:00:00+00:00 |
| Valid Until | 2027-02-27T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 064772DF706B47674722C1834FCBB1A6 |
| Thumbprint | EAD7059B63800BE769A6AE97EBE740532E38D9C9 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 1 | 2 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 27% | 2 | 2 |
| Overall | 22% | 9 | 13 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says IE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-01 12:34:50 UTC |
| Last Seen | 2026-09-18 19:48:51 UTC |
| Profile Built | 2026-09-18 20:03:45 UTC |
| Data Freshness | Live |
| Signal Types | 32 |
| Total Observations | 38 |
Full dossier details are available via our API.