Intelligence analysts profiled IP 54.77.199.36/32 as a low-risk asset owned by Amazon Technologies Inc. (ASN 16509), located in Dublin, Ireland (eu-west-1). The endpoint operated within the AMAZON-2011L CIDR block.
Threat intelligence data returned zero blacklist entries and no known malicious indicators. Behavioral analysis detected no WAF violations, enumeration strikes, or honeypot hits. Network scanning identified the asset as a cloud infrastructure resource with no open ports or active service banners. DNS records were forward-confirmed to `ec2-54-77-199-36.eu-west-1.compute.amazonaws.com`, and the associated domain maintained valid SPF and DMARC records.
The profile recommendation classified the IP as a legitimate endpoint. Analysts advised an Allow action with an information-level severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-2011L |
| CIDR Block | 54.64.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | ec2-54-77-199-36.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | ec2-54-77-199-36.eu-west-1.compute.amazonaws.com |
๐ DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | โ |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | awselb/2.0 |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | 2018-06-20T05:36:11+00:00 |
| Valid Until | 2058-06-10T05:36:11+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 14600 days |
| Serial Number | 01 |
| Thumbprint | 0A086E487AE9C328B238DCFEA707AF1CB6A32C21 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 20% | 1 | 1 |
| routing | 20% | 1 | 1 |
| services | 20% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 20% | 1 | 1 |
| geolocation | 20% | 1 | 1 |
| Overall | 16% | 5 | 5 |
| Data Coherence | Mixed Signals (68%) โ 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
โ TLS certificate claims KR but primary geo says GB
๐ Observation Timeline ๐ Live
| First Seen | 2026-09-09 02:25:53 UTC |
| Last Seen | 2026-09-12 02:11:37 UTC |
| Profile Built | 2026-09-12 02:20:41 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.