52.78.63.73📋 Copy

# IP Intelligence Briefing: 52.78.63.73/32

Classification: LOW RISK

Date: 2026-06-15

Prepared For: SOC Operations Team

---

## Executive Summary

IP 52.78.63.73 is identified as an Amazon Web Services EC2 instance deployed in the Asia Pacific (Seoul) Region (ap-northeast-2). The IP presents a low-risk profile with no active threat indicators, no open ports, and no blacklist associations. No blocking action is currently recommended.

---

## Infrastructure Profile

• IP Address: 52.78.63.73/32
• Risk Score: 25/100 (Low Risk)
• Provider: Amazon Web Services (ASN 16509)
• Organization: AWS Asia Pacific (Seoul) Region
• BGP Prefix: 52.78.0.0/16
• Geolocation: Seoul, South Korea (KR)
• Hostname: ec2-52-78-63-73.ap-northeast-2.compute.amazonaws.com
• Infrastructure Type: Cloud Hosting (EC2 Instance)

---

## Threat Assessment

• Abuse Confidence: Not applicable (low-risk infrastructure)
• Blacklist Status: Clean (0 blacklist entries)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Association: None detected
• Threat Persistence: 0 days (no persistent malicious activity observed)

---

## Network Services & Exposure

• Open Ports: None detected
• Service Banner: None (firewalled/no services exposed)
• TLS Certificate: Not detected
• HTTP Title: Not detected
• DNS Configuration: Properly configured with SPF and DMARC records
• DNS Resolution: Forward confirmed to expected hostname

---

## Control Plane Analysis

• DNSSEC Valid: Yes
• Operator Score: 0.2609 (Basic classification)
• Route Stability: Not stable (0 route changes in 30 days)
• DNSBL Listed: 1 of 8 total lists (low-impact listing)
• RPKI/Irr: State not determinable

---

## Neighborhood Assessment

• Subnet: 52.78.63.73/24
• Abuse Density: 1 (low)
• Classification: mostly_clean
• Threat Siblings: 1 detected in subnet
• Inherited Risk: 2 (minimal)

---

## Historical Observations

• Observation Count: 20 signals
• Recent Activity: Signals observed as of 2026-06-15
• Threat Trend: Stable (no escalation detected)
• Ownership Changes: 0
• Persistently Malicious: No

---

## Related Entities

• DNS Associations: ec2-52-78-63-73.ap-northeast-2.compute.amazonaws.com
• Network Associations: AMAZON-ICN (Amazon Internet Cloud Network)
• Total Relationships: 29 (primarily DNS and network associations)

---

## Recommended Actions

• Immediate Blocking: Not recommended
• Monitoring Level: Standard traffic monitoring
• Firewall Rules: No specific rules required
• WAF Configuration: No special configuration needed

---

## Intelligence Notes

This IP represents standard AWS cloud infrastructure with appropriate security controls (SPF/DMARC). The absence of open ports indicates the instance is either non-public-facing or properly secured. The subnet shows minimal abuse density. No intelligence warrants additional scrutiny at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.