3.252.95.240📋 Copy

# IP Intelligence Briefing: 3.252.95.240/32

Date: June 16, 2026

Status: Low Risk

Risk Score: 25/100

## Executive Summary

IP 3.252.95.240 is a legitimate Amazon Web Services (AWS) cloud compute instance deployed in Dublin, Ireland (eu-west-1 region). The address is classified as low-risk with no active threat indicators, malicious reputation, or observed abuse activity. The IP belongs to the AMAZON-DUB network block (3.248.0.0/13) and is associated with Amazon Data Services Ireland Limited (ASN: 16509).

## Infrastructure Classification

## Threat Assessment

• Abuse Confidence Score: None recorded
• Threat Indicators: None detected
• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## Network Context

Subnet Analysis (3.252.95.0/24):

• Abuse Density: 0 (clean)
• Classification: Clean
• Threat Siblings: 0
• Active Siblings: 0
• Total Siblings: 1

The IP resides in a subnet with no observed abuse activity. No neighboring IPs within the /24 range have been flagged for malicious activity.

## Operational Signals

Open Ports:

• Port 22/TCP: SSH (OpenSSH 9.6p1 Ubuntu-3ubuntu13.15)

DNS Resolution:

• Forward Resolution: Confirmed
• Forward Hostnames: ec2-3-252-95-240.eu-west-1.compute.amazonaws.com
• Forward Resolution Count: 1

Email Authentication:

• SPF: Configured
• DMARC: Configured

## Historical Analysis

The IP address has generated 19 observation records with consistent stability:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: No
• Threat Observation Count: 0

Recent observations (June 16, 2026) confirm:

• Stable cloud infrastructure deployment
• Consistent DNS resolution to AWS hostname
• No changes in network classification
• No emergence of threat indicators

## Recommended Actions

Based on the low-risk profile and legitimate cloud infrastructure classification:

1. No blocking required – The IP is a legitimate AWS EC2 instance with no malicious indicators

2. Monitor as-is – Standard cloud traffic monitoring applies

3. No firewall rules – No specific firewall or WAF rules recommended

4. Allow normal traffic – Standard cloud compute traffic should be permitted

## Conclusion

IP 3.252.95.240 represents a benign AWS cloud infrastructure asset. The address shows all characteristics of legitimate cloud hosting with no evidence of malicious activity, abuse, or compromise. No defensive action is recommended beyond standard cloud traffic monitoring.

---

*Intelligence generated by IPDebrief. For SOC analyst consumption.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.