3.22.195.195📋 Copy

# IP Intelligence Briefing: 3.22.195.195/32

## Executive Summary

IP address 3.22.195.195 is a low-risk infrastructure endpoint associated with Amazon Web Services (AWS) infrastructure. The IP operates from the US East Region (Ohio/Columbus) and maintains AWS cloud identity. Current threat assessment indicates minimal risk exposure with no active malicious indicators observed.

## Infrastructure Profile

• IP Address: 3.22.195.195/32
• Risk Score: 25 (Low Risk)
• Provider: Amazon Web Services (ASN 16509)
• Organization: AT-88-Z
• Geolocation: United States, Ohio, Columbus
• Network Block: 3.0.0.0/9
• DNS Resolution: ec2-3-22-195-195.us-east-2.compute.amazonaws.com
• Infrastructure Type: AWS Cloud Instance
• Services Status: No open ports detected (firewalled)

## Threat Indicators Assessment

• Blacklist Count: 0
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Known Campaigns: None identified
• DNSBL Listings: 1 of 8 total lists
• Abuse Confidence Score: Not applicable (infrastructure endpoint)
• Operator Score: 0.2609 (Basic classification)

## Observation History

Analysis of 22 historical observations reveals the following patterns:

• Recent Activity: August 5, 2026 observations show TLS certificate interactions and port scanning activity
• Server Banner: uvicorn application detected on scanned ports
• TLS Protocol: TLS 1.2 with AES-128-GCM cipher suite
• Ownership: Consistent with AWS infrastructure (no persistent malicious activity detected)
• Threat Persistence: Zero threat persistence days recorded
• Notable Observation: Certificate associations with "DEEPTEK MEDICAL IMAGING PRIVATE LIMITED" (Maharashtra, India) noted in historical data

## Network Relationships

• DNS Associations: Multiple associations to ec2-3-22-195-195.us-east-2.compute.amazonaws.com
• Network Affiliation: AT-88-Z (Amazon AWS)
• Same Subnet: No active sibling threats identified within /24 neighborhood
• Control Plane: BGP prefix 3.20.0.0/14, route stable
• RPKI State: Valid (DNSSEC validated)

## Neighborhood Analysis

• Subnet: 3.22.195.195/24
• Abuse Density: 0%
• Classification: Clean
• Threat Siblings: 0
• Active Siblings: 0
• Total Siblings: 1

## Risk Assessment

The IP address 3.22.195.195 presents minimal security risk. Key factors supporting this assessment include:

• Legitimate AWS cloud infrastructure with proper DNS resolution
• No open ports or exposed services detected
• Zero blacklist entries
• Clean neighborhood classification with no sibling threats
• Historical data shows no persistent malicious behavior

## Recommended Actions

• Allow: No firewall restrictions required for legitimate AWS traffic
• Monitor: Standard logging of inbound connection attempts
• Block: No action required based on current threat profile
• Investigate: If traffic originates from unexpected geographic locations, verify against expected AWS traffic patterns

---

*Report generated from IPDebrief intelligence data. Assessment current as of analysis timestamp.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.