54.72.62.103
Intellectual Briefing: 54.72.62.103
The IP address 54.72.62.103 was identified as a web server operating on port 443 within Amazon Web Services infrastructure (ASN 16509). Ownership records attributed the address to Amazon.com, Inc., with geolocation data pointing to Dublin, Ireland (eu-west-1). The endpoint resolved to `ec2-54-72-62-103.eu-west-1.compute.amazonaws.com` and presented an TLS certificate for `*.samsungapps.com` issued by Sectigo.
Threat analysis classified the host as Low Risk with a risk score of 25. Behavioral logs recorded zero incidents, honeypot hits, or WAF violations. However, control plane data indicated the address was listed on one DNS blacklist. The `threatActor` classification labeled the host as Suspicious despite the absence of specific campaign matches.
Validation revealed signal contradictions, with geo sources disagreeing between Ireland (IE), Great Britain (GB), and South Korea (KR), while the TLS certificate subject organization claimed South Korea. Due to conflicting geolocation signals and low confidence levels, the host was categorized as having Unknown Intent. Analysts recommended monitoring the address for changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-ZDUB6 |
| CIDR Block | 54.72.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-54-72-62-103.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-54-72-62-103.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungapps.comsamsungapps.com |
| Valid From | 2026-01-21T00:00:00+00:00 |
| Valid Until | 2027-02-21T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 5148AC943018089BA7F33EA66EFCE0ED |
| Thumbprint | 7145AB0573DBCAB09687C301C3BC215A784A2937 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says IE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 09:35:34 UTC |
| Last Seen | 2026-09-07 09:35:34 UTC |
| Profile Built | 2026-09-07 09:49:18 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 25 |
Full dossier details are available via our API.