54.246.58.140
Intelligence assessment for 54.246.58.140 identified the system as a Web Server owned by Amazon Technologies Inc. (ASN 16509) within the 54.224.0.0/11 block. The infrastructure operated within the eu-west-1 region (Dublin, IE), resolving to an EC2 instance via standard AWS routing. Open port 443 served HTTPS traffic utilizing an Envoy server banner.
Analysis revealed a significant infrastructure contradiction. The TLS certificate subject identified Netflix Inc (OU=Platform Security), validating hostnames such as logging.apiproxy.eu-west-1.prod.netflix.net, while the IP ownership remained Amazon-hosted. Geolocation sources conflicted regarding the physical location, reporting inconsistencies between US, GB, and IE despite the certificate indicating a US origin.
Threat analysis indicated no active malicious activity. The IP held a Low Risk reputation score of 25 with zero blacklist hits and no association with known campaigns. Behavioral monitoring recorded no honeypot strikes or WAF violations. Given the infrastructure contradictions and the presence of Netflix-specific certificates on AWS hosting, the recommendation was to monitor traffic without immediate remediation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-2011L |
| CIDR Block | 54.224.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-54-246-58-140.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Hosted Domain | apiproxy-logging-s1-bc2f1b420f34a65d.elb.eu-west-1.amazonaws.com |
| Hosted Domain | ec2-54-246-58-140.eu-west-1.compute.amazonaws.com |
| Forward Hostnames | ec2-54-246-58-140.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 6/6 domains |
| DMARC | 6/6 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 6 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | envoy |
| HTTP Title | — |
🔐 TLS Certificate
SERIALNUMBER=i-0100cbb850fc858b7, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | logging.apiproxy.eu-west-1.prod.netflix.netlogging.apiproxy.netflix.netapiproxy.app.eu-west-1.prod.cloud.netflix.netapiproxy.netflix.netapiproxy-logging.eu-west-1.prod.netflix.netapiproxy-logging.dynprod.netflix.netlogging.apiproxy.dynprod.netflix.netapiproxy-logging.prod.netflix.netapiproxy.eu-west-1.dynprod.netflix.netapiproxy.eu-west-1.prod.netflix.net |
| Valid From | 2026-09-07T03:28:26+00:00 |
| Valid Until | 2026-09-14T04:28:26+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256ECDSA |
| Validity Period | 7 days |
| Serial Number | 0102FE57B8EC61B1598A5A33BFF97F0E4641 |
| Thumbprint | 8087E5A3D2B4C428674521BA43ED451CF597E9BE |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 5 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 27% | 10 | 21 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims US but primary geo says IE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-30 02:58:00 UTC |
| Last Seen | 2026-09-23 01:28:02 UTC |
| Profile Built | 2026-09-23 01:44:24 UTC |
| Data Freshness | Live |
| Signal Types | 28 |
| Total Observations | 53 |
Full dossier details are available via our API.