54.76.74.206
Intelligence Briefing: 54.76.74.206/32
Infrastructure Ownership:
Analysis identified the IP as infrastructure belonging to Amazon Technologies Inc. (ASN 16509) within the AMAZON-2011L block (54.64.0.0/11). DNS resolution confirmed the address as an EC2 instance located in Dublin, Ireland.
Service Configuration:
The endpoint operated HTTP and HTTPS services on ports 80 and 443. TLS certificate analysis revealed a subject for `*.push.samsungosp.com`, associated with Samsung Electronics Co,.LTD in Gyeonggi-do, KR. The certificate issuer is Sectigo RSA Organization Validation Secure Server CA.
Threat and Risk Profile:
The asset held a Low Risk reputation score of 25. Behavioral monitoring recorded zero honeypot hits and zero WAF violations. However, the address appeared on one DNSBL out of eight queried lists. Control plane data flagged the host as a "Suspicious Host" due to signal contradictions, though it was not classified as a known attacker.
Data Contradictions:
Geolocation validation failed consensus. While primary sources located the server in Ireland (IE), the TLS certificate and secondary sources indicated South Korea (KR). Geo sources disagreed on country, and the certificate subject location did not match the primary server location.
Recommendation:
Security operations teams should monitor the address. While the IP represents a legitimate cloud hosting provider, conflicting geolocation signals and minor blacklist presence suggest a need for continued observation until signal coherence improves.
Observation Window:
Activity was recorded between 2026-08-29 and 2026-09-06.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-2011L |
| CIDR Block | 54.64.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-54-76-74-206.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-54-76-74-206.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 4/4 domains |
| DMARC | 2/4 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.push.samsungosp.compush.samsungosp.com |
| Valid From | 2025-11-17T00:00:00+00:00 |
| Valid Until | 2026-12-18T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 163F914E35AFA5204EAE5DC0D06733D3 |
| Thumbprint | 1565E26D89D47C1A2980DCF56D0FCD39AC1E4E91 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 17 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says IE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 21:19:07 UTC |
| Last Seen | 2026-09-23 05:12:23 UTC |
| Profile Built | 2026-09-23 05:22:51 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 39 |
Full dossier details are available via our API.