3.5.78.203
Intelligence Briefing: 3.5.78.203/32
The IP address was identified as a Low Risk asset with a risk score of 25. Ownership records indicated Amazon Data Services Northern Virginia (ASN 16509) within the AMAZON-S3 block (3.5.0.0/16). Services observed included HTTP, HTTPS, and HTTP-alt on ports 80, 443, and 8080. TLS certificate validation confirmed association with *.s3-us-west-2.amazonaws.com. No known attacker indicators, spam sources, or active campaigns were detected. One DNSBL listing was recorded out of eight total lists. A contradiction was noted between claimed geolocation (Portland, OR) and RTT physics measurements, specifically a 7950km distance against an 86ms RTT. Behavioral analysis showed no enumeration strikes or WAF violations. The recommendation for this asset was monitoring due to signal contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS16509 |
| Network Name | AMAZON-S3 |
| CIDR Block | 3.5.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 8080 | http-alt | tcp | — |
| Closed Ports | 22, 25, 3389, 8443 (3 open / 7 scanned) | ||
| Server | AmazonS3 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.s3-us-west-2.amazonaws.com*.s3.amazonaws.coms3-control.us-west-2.amazonaws.com*.s3.dualstack.us-west-2.amazonaws.coms3-deprecated.us-west-2.amazonaws.coms3-control.dualstack.us-west-2.amazonaws.com*.s3-deprecated.us-west-2.amazonaws.coms3.amazonaws.coms3.dualstack.us-west-2.amazonaws.com*.s3-control.dualstack.us-west-2.amazonaws.com |
| Valid From | 2025-11-18T00:00:00+00:00 |
| Valid Until | 2026-10-30T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 346 days |
| Serial Number | 0F061457518182D12E2A6E2A1F0B6A58 |
| Thumbprint | F8A8052C6A4D1B65BBE8A25159D059B84184CB1E |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 20% | 1 | 1 |
| services | 40% | 2 | 3 |
| ownership | 40% | 2 | 3 |
| reputation | 20% | 1 | 2 |
| geolocation | 40% | 2 | 3 |
| Overall | 33% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 13:45:39 UTC |
| Last Seen | 2026-09-09 05:56:38 UTC |
| Profile Built | 2026-09-10 13:50:24 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 26 |
Full dossier details are available via our API.