3.224.169.28
Intelligence was generated for IP address 3.224.169.28, which was associated with Amazon Data Services Northern Virginia under ASN 14618 (AMAZON-IAD). Geolocation data placed the host in Ashburn, Virginia, US, with a consensus accuracy radius of 150 km.
The overall reputation was classified as Low Risk with a risk score of 25. Threat analysis labeled the host as a "Suspicious Host" with attribution confidence of 70%, though no specific known campaigns or active attacker tags were identified. The address was listed on one DNSBL out of eight total lists checked, but no blacklists or known spam sources were confirmed. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or total incidents, indicating no persistent malicious activity.
Network role identification confirmed the address as infrastructure belonging to Amazon Web Services with services described as firewalled or non-responding. DNS resolution was successful, returning EC2 compute hostnames, and DNS hygiene was rated Good with SPF and DMARC records present. The control plane showed an operator score of 0.1304 and a label of Minimal. Based on these indicators, the recommendation was to monitor the address, noting low-grade risk indicators present. Data freshness confirmed the last observation occurred on 2026-09-25.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS14618 |
| Network Name | AMAZON-IAD |
| CIDR Block | 3.224.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-3-224-169-28.compute-1.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-3-224-169-28.compute-1.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | awselb/2.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | datarouter.cfef.live.use1a.on.epicgames.comdatarouter-public-service-prod06.ol.epicgames.commetric-public-service-prod.ol.epicgames.comdatarouter-public-service-prod.ol.epicgames.comdatarouter-public-service-prod06.ol.epicgames.netdatarouter-weighted.ol.epicgames.comdatarouter-admin-service-prod.ol.epicgames.netdatarouter-prod.ak.epicgames.comdatarouter-mobile.ol.epicgames.comdatarouter.ol.epicgames.com |
| Valid From | 2026-01-03T00:00:00+00:00 |
| Valid Until | 2027-02-01T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 394 days |
| Serial Number | 030BC55196CE7674961290F357526953 |
| Thumbprint | B28022588C3F7F089587C19DBE94E16C3DB79345 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-25 21:36:32 UTC |
| Last Seen | 2026-09-25 21:36:32 UTC |
| Profile Built | 2026-09-25 21:52:30 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.