3.5.91.10
Intelligence assessment for IP 3.5.91.10/32 classified the address as low risk with a reputation score of 20. Ownership records attributed the IP to Amazon Data Services Northern Virginia (ASN 16509) under the netname AMAZON-S3. Network services revealed open ports 80, 443, and 8080, with TLS certificates validating *.s3.us-east-2.amazonaws.com and a server banner identifying the service as AmazonS3. Geolocation data placed the infrastructure in Columbus, Ohio, United States, though a contradiction was recorded where the claimed distance of 6,580.9km exceeded the minimum possible RTT of 131.6ms for that location. Routing analysis indicated an origin ASN of 16509, but route stability was flagged as false. No threat indicators, blacklist entries, or known campaign associations were observed, and behavioral analysis showed zero honeypot hits or active attacker status. Due to signal contradictions regarding geolocation and routing stability, the recommendation was to monitor the address. No immediate firewall rules were required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS16509 |
| Network Name | AMAZON-S3 |
| CIDR Block | 3.5.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 8080 | http-alt | tcp | — |
| Closed Ports | 22, 25, 3389, 8443 (3 open / 7 scanned) | ||
| Server | AmazonS3 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.s3.us-east-2.amazonaws.coms3.us-east-2.amazonaws.com*.s3.amazonaws.com*.s3-accesspoint.dualstack.us-east-2.amazonaws.com*.s3-control.us-east-2.amazonaws.coms3.dualstack.us-east-2.amazonaws.coms3-control.dualstack.us-east-2.amazonaws.com*.s3-deprecated.us-east-2.amazonaws.com*.s3.dualstack.us-east-2.amazonaws.coms3-control.us-east-2.amazonaws.com |
| Valid From | 2026-07-12T00:00:00+00:00 |
| Valid Until | 2027-01-25T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 0366E4CE615371059E0A3D11489858AF |
| Thumbprint | C0267BE78793B1B794062FC6EC6FB45E02613DA2 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 37% | 2 | 6 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 33% | 2 | 4 |
| Overall | 29% | 10 | 26 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 02:21:49 UTC |
| Last Seen | 2026-09-23 21:34:00 UTC |
| Profile Built | 2026-09-23 21:44:34 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 40 |
Full dossier details are available via our API.