3.109.4.149📋 Copy

# IP Intelligence Briefing: 3.109.4.149/32

## Executive Summary

IP address 3.109.4.149 is a low-risk infrastructure endpoint operating within Amazon Web Services (AWS) infrastructure in Mumbai, India. The asset exhibits no malicious indicators, threat associations, or abuse patterns. Risk scoring indicates clean status with no actionable security recommendations at this time.

## Infrastructure Profile

## Service Classification

The endpoint is classified as an AWS EC2 instance with no exposed services:

• Open Ports: None detected
• TLS Certificate: Not available
• HTTP Title: Not available
• Service Purpose: Firewalled / No Services
• Infrastructure Type: Cloud (AWS)

## DNS Analysis

## Threat Intelligence Assessment

Threat Indicators: None detected

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Abuse Confidence Score: Not applicable
• Known Campaigns: None

Campaign Correlation:

• Likelihood: None
• Certificate Matches: 0
• Correlated IPs: 0
• Banner Matches: 0

## Neighborhood Analysis (3.109.4.0/24)

Risk Distribution: High: 0, Medium: 0, Low: 0

## Observation History

Analysis of 27 historical observations indicates stable infrastructure characteristics:

Recent Signals (2026-07-30 to 2026-08-05):

• ASN signals consistently identifying AWS infrastructure (ASN 16509)
• Route stability: Not stable (1 BGP prefix change in 30-day window)
• Operator score: 0.3478
• No threat or malicious activity signals observed
• No campaign correlations detected

## Relationship Graph

13 relationships identified:

• DNS Associations: Multiple references to ec2-3-109-4-149.ap-south-1.compute.amazonaws.com
• Network Associations: AMAZON-BOM network relationships

## Recommended Security Actions

Current Risk Score: 0

Recommendations: None required

• No firewall rules generated
• No blocking or rate-limiting actions recommended

Note: These recommendations are probabilistic and should be combined with other signals before taking action.

---

Assessment: This IP represents legitimate cloud infrastructure with no evidence of malicious activity. Standard logging and monitoring practices are sufficient. No immediate defensive actions required.

Generated: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.