## IP INTELLIGENCE BRIEFING
Target: 3.249.143.183/32
Classification: Low Risk
Date: Current
Analyst: IPDebrief Intelligence
---
EXECUTIVE SUMMARY
IP address 3.249.143.183 is an Amazon Web Services (AWS) infrastructure endpoint classified as Low Risk with a risk score of 25. The address resolves to a firewalled AWS EC2 instance in Dublin, Ireland, with no active malicious indicators observed. No immediate defensive action is recommended based on current threat intelligence.
---
TECHNICAL PROFILE
| Attribute | Value |
|---|---|
| **Risk Score** | 25 (Low Risk) |
| **Reputation** | Low Risk |
| **ASN** | 16509 (Amazon Web Services) |
| **BGP Prefix** | 3.248.0.0/13 |
| **Organization** | Amazon Web Services |
| **Country** | Ireland (IE) |
| **City** | Dublin |
| **Geolocation Accuracy** | 150 km radius |
| **DNS PTR Record** | ec2-3-249-143-183.eu-west-1.compute.amazonaws.com |
---
NETWORK CHARACTERISTICS
- Infrastructure Type: AWS EC2 instance
- Service Status: Firewalled / No services detected
- Open Ports: None identified
- TLS Certificate: None
- Connection Type: Unknown
- Network Classification: Not cloud/CDN/VPN/proxy/Tor/hosting/mobile/residential
- RISK FACTOR: No threat indicators, not listed on known blacklist feeds (blacklist count: 0)
---
THREAT INDICATORS
- Threat Indicators: None detected
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Campaign Associations: None identified
- Threat Feeds: No matches
- DNSBL Listings: 1 of 8 total lists
---
SUBNET NEIGHBORHOOD ANALYSIS
Subnet: 3.249.143.183/24
- Abuse Density: 0 (Low)
- Total Siblings: 1 detected
- Active Siblings: 0
- Threat Siblings: 0
- Neighbor IP: 3.249.143.223 (Risk Score: 25)
The /24 subnet demonstrates minimal abuse activity with both observed neighbors maintaining low-risk classifications.
---
OBSERVATION HISTORY
Total observations: 13 signals recorded
- Latest Timestamp: 2026-08-06T05:21:29 UTC
- Subnet Classification: Mostly clean
- Inherited Risk: 2 (Low)
- Abuse Density: 0.5
- Threat Persistence: 0 days (No persistent malicious activity)
Temporal analysis indicates stable network behavior with no escalation of threat signals over the observation window.
---
RELATIONSHIP GRAPH
- DNS Associations: 1 hostname resolved
- ec2-3-249-143-183.eu-west-1.compute.amazonaws.com
No additional relationships to organizations, certificates, or correlated entities detected.
---
RECOMMENDED ACTIONS
Current Risk Level: Low (Score: 25)
No immediate firewall or blocking actions recommended. The IP address demonstrates benign characteristics consistent with legitimate cloud infrastructure operations:
- No threat indicators present
- No malicious activity observed
- AWS EC2 instance with proper DNS resolution
- Subnet neighborhood shows minimal abuse density
Standard monitoring practices apply. No special rules required for iptables, nftables, nginx, pfSense, Cloudflare WAF, or AWS WAF at this time.
---
ANALYST NOTES
This IP address represents a standard AWS compute instance with no malicious indicators. The absence of open ports, combined with proper DNS PTR resolution to AWS infrastructure, suggests legitimate cloud hosting activity. The subnet's low abuse density and the single neighbor's similar risk profile reinforce the benign classification. Routine traffic analysis is sufficient; no elevated threat response measures are warranted.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 3.248.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | ec2-3-249-143-183.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | ec2-3-249-143-183.eu-west-1.compute.amazonaws.com |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 17% | 1 | 1 |
| Overall | 22% | 9 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-03 17:30:42 UTC |
| Last Seen | 2026-08-13 05:15:46 UTC |
| Profile Built | 2026-08-13 05:29:47 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 24 |
Full dossier details are available via our API.