3.5.133.113
An intelligence analysis was conducted on IP 3.5.133.113/32, which was observed between 2026-09-12 and 2026-09-23. The address was registered to Amazon Data Services Northern Virginia (AS16509) under the netname AMAZON-S3, with a risk score of 25 classified as Low Risk.
The profile indicated a Low Risk reputation with no evidence of known campaigns, active attacker status, or spam source activity. However, the control plane data showed a DNSBL listing count of 1 out of 8 total lists. Network role analysis identified the service as a Web Server within Amazon Web Services infrastructure. Open ports included TCP 80, TCP 443, and TCP 8080. The TLS certificate was issued by Amazon RSA 2048 M01 to CN=*.s3.us-east-2.amazonaws.com, and the server banner returned AmazonS3.
Geolocation data reported Columbus, OH, USA, but geo-validation flagged a contradiction between claimed geolocation and RTT physics measurements. The neighborhood classification was "clean" with an abuse density of 0.05. Due to signal contradictions and unknown intent classification, the recommendation was to monitor the asset with low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS16509 |
| Network Name | AMAZON-S3 |
| CIDR Block | 3.5.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | s3-w.us-east-2.amazonaws.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | s3-w.us-east-2.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 8080 | http-alt | tcp | — |
| Closed Ports | 22, 25, 3389, 8443 (3 open / 7 scanned) | ||
| Server | AmazonS3 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.s3.us-east-2.amazonaws.coms3.us-east-2.amazonaws.com*.s3.amazonaws.com*.s3-accesspoint.dualstack.us-east-2.amazonaws.com*.s3-control.us-east-2.amazonaws.coms3.dualstack.us-east-2.amazonaws.coms3-control.dualstack.us-east-2.amazonaws.com*.s3-deprecated.us-east-2.amazonaws.com*.s3.dualstack.us-east-2.amazonaws.coms3-control.us-east-2.amazonaws.com |
| Valid From | 2026-07-12T00:00:00+00:00 |
| Valid Until | 2027-01-25T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 0366E4CE615371059E0A3D11489858AF |
| Thumbprint | C0267BE78793B1B794062FC6EC6FB45E02613DA2 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 43% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 26% | 10 | 18 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-12 14:10:08 UTC |
| Last Seen | 2026-09-23 13:59:33 UTC |
| Profile Built | 2026-09-23 14:10:20 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 33 |
Full dossier details are available via our API.