3.149.159.107
Intelligence assessment indicated IP 3.149.159.107 was classified as Low Risk with a score of 25. Ownership attribution linked the address to Amazon Technologies Inc. (AS16509), specifically within the AT-88-Z block. Reverse DNS resolution confirmed the system as an EC2 instance located in Columbus, Ohio. The endpoint hosted HTTPS traffic on port 443, presenting a TLS certificate valid for Samsung Electronics Co., Ltd. under the domain *.samsunggeopush.com.
Threat analysis found no indicators of known attacker, spam source, or Tor exit status. The immediate subnet was classified as clean with zero threat siblings. However, discrepancies were observed in geolocation data, with sources conflicting between the United States and South Korea. A single DNS blacklist listing was identified among eight total checks. Consequently, the system recommended a Monitor action due to signal contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AT-88-Z |
| CIDR Block | 3.128.0.0/9 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-3-149-159-107.us-east-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-3-149-159-107.us-east-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | awselb/2.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsunggeopush.comsamsunggeopush.com |
| Valid From | 2026-02-10T00:00:00+00:00 |
| Valid Until | 2027-03-13T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 241F1958D9397A3EF354970A2F6A886E |
| Thumbprint | A8654CDBFEE73C3CEC3CD64000019FF98673B72D |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 25% | 1 | 2 |
| reputation | 25% | 1 | 1 |
| geolocation | 50% | 2 | 3 |
| Overall | 32% | 9 | 11 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-20 12:48:08 UTC |
| Last Seen | 2026-09-20 12:48:08 UTC |
| Profile Built | 2026-09-23 13:10:05 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 26 |
Full dossier details are available via our API.