54.171.115.210📋 Copy

# IP INTELLIGENCE BRIEFING: 54.171.115.210/32

Classification: Moderate Risk | Date: Current Analysis

## EXECUTIVE SUMMARY

IP address 54.171.115.210 is identified as an Amazon Web Services EC2 instance hosted in the Dublin region (eu-west-1). The asset carries a moderate risk score (50/100) primarily attributable to DNSBL listings (2 out of 8 lists). No active threat indicators, campaigns, or malicious behavior detected. No open ports or services observed.

## OWNERSHIP & INFRASTRUCTURE

• ASN: 16509 (Amazon Technologies Inc.)
• Organization: AMAZON
• CIDR Block: 54.144.0.0/12
• Network Role: Amazon Web Services
• BGP Prefix: 54.171.0.0/16
• RIR: ARIN
• DNS Hostname: ec2-54-171-115-210.eu-west-1.compute.amazonaws.com
• Geolocation: Dublin, Leinster, Ireland (IE)

## NETWORK CLASSIFICATION

## THREAT POSTURE

• Risk Score: 50 (Moderate)
• Abuse Confidence Score: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0 active blacklists
• DNSBL Listed: 2 of 8 lists
• Known Campaigns: None
• Threat Feeds: None

## OBSERVATION HISTORY (17 Total Observations)

Recent signal observations recorded on 2026-07-31:

1. Geolocation Conflicts: Multiple geolocation sources report conflicting data:

- MaxMind GeoLite2: Dublin, Ireland (EU)

- Cymru Country: United States (US)

- Multiple ARIN/AS lookup sources confirm Amazon ownership

2. Ownership Stability: Zero ownership changes detected. Persistent ownership by Amazon Technologies Inc. confirmed.

3. Threat Persistence: Zero threat observation count; not persistently malicious.

## RELATIONSHIP ANALYSIS

Connected Entities (6 relationships):

• DNS Association: ec2-54-171-115-210.eu-west-1.compute.amazonaws.com
• Network Association: AMAZON (multiple entries)

Key Findings:

• Single hostname resolution
• No certificate associations
• No correlated malicious IPs

## NEIGHBORHOOD ANALYSIS

Subnet: 54.171.115.210/24

• Neighbor Count: 0
• Abuse Density: 0%
• Risk Distribution: No classified neighbors
• Active Siblings: None detected

## CONTROL PLANE DATA

• Origin ASN: 16509
• Route Stability: Unstable
• RPKI State: Not assessed
• DNSSEC: Valid
• HTTP/2: No
• HSTS: No

## RECOMMENDATIONS

Immediate Actions:

1. Monitor DNSBL Listings: Investigate the 2 DNSBL listings to determine source and remediation requirements.

2. Verify Service Status: No services detected; confirm if this is intended behavior for the workload.

3. Geolocation Validation: Geographic inconsistency between sources warrants periodic re-verification.

Long-Term Monitoring:

1. Track DNSBL status changes over 30-day period

2. Monitor for service activation (open ports, TLS certificates)

3. Continue observation of geolocation signals for consistency

## INTELLIGENCE NOTES

This IP represents legitimate AWS infrastructure with a moderate risk rating driven by DNSBL listings rather than active malicious behavior. The absence of open ports and services suggests this may be a dormant, reserved, or heavily restricted EC2 instance. The DNSBL listings warrant investigation but do not indicate active threat activity. Geographic signal conflicts are common in cloud environments and should be validated through additional sources if critical for attribution.

Status: Monitor | Confidence: High | Threat Level: Low

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.