INTELLIGENCE BRIEFING: 13.204.86.3/32
Classification: LOW RISK โ Legitimate AWS Cloud Infrastructure
Ownership & Network Profile
IP 13.204.86.3 is registered to Amazon Technologies Inc. (ASN 16509) under the AT-88-Z network block (13.200.0.0/13). The address resolves to ec2-13-204-86-3.ap-south-1.compute.amazonaws.com, indicating Amazon Web Services EC2 infrastructure hosted in the Mumbai region (MH), India. The IP is classified as cloud compute infrastructure with hosting capabilities enabled.
Risk Assessment
Current risk score: 25 (Low Risk). Provider score: 0. Authority score: 0. No threat indicators detected in the profile. The IP shows no association with known attackers, spam sources, or Tor exit nodes. Blacklist count: 0. The subnet (13.204.86.0/24) is classified as "clean" with an abuse density of 0 and no threat siblings observed.
Network & Service Profile
No open ports detected. Services: Firewalled / No Services. DNS configuration is forward-resolved with one PTR hostname. Email authentication (SPF, DMARC) is present for the amazonaws.com domain. Control plane data shows stable BGP prefix 13.204.0.0/14 with origin ASN 16509.
Observation History
Analysis of 21 observations collected from 2026-08-05 through 2026-08-12 shows consistent behavior. Subnet classification remained "clean" with 0 abuse density across all observations. Geographic location consistently resolved to Mumbai, India (19.08°N, 72.88°E). ICMP validation failed due to blocked probes, but geo-location was deemed plausible with minimum possible RTT of 134.76ms. No threat persistence or malicious activity observed.
Relationship Graph
Relationships show repeated associations with the AT-88-Z network and ec2 hostname, consistent with standard AWS infrastructure patterns. No anomalous relationships detected.
Recommendations
No security actions recommended. IP 13.204.86.3 is legitimate AWS cloud infrastructure with no malicious indicators. Standard monitoring is appropriate; no blocking or firewall rules required.
Status: CLEAR โ Authorized AWS EC2 Instance
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AT-88-Z |
| CIDR Block | 13.200.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | ec2-13-204-86-3.ap-south-1.compute.amazonaws.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | ec2-13-204-86-3.ap-south-1.compute.amazonaws.com |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 45% | 2 | 3 |
| routing | 25% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 32% | 2 | 3 |
| Overall | 28% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-22 19:32:13 UTC |
| Last Seen | 2026-08-12 17:04:09 UTC |
| Profile Built | 2026-08-12 17:18:40 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.