3.5.93.10
Intelligence Briefing: IP 3.5.93.10/32
Classification: Low Risk Infrastructure Node
Date: 2026-09-16
Analyst: IPDebrief Threat Intelligence
Executive Summary
The target IP was identified as a low-risk infrastructure node associated with Amazon Data Services Northern Virginia (AS16509). The profile indicated a risk score of 25 with no known malicious campaigns or blacklist associations. While the baseline risk remained low, the data presented signal contradictions that warranted monitoring.
Technical Profile
* Ownership: Amazon Data Services Northern Virginia (AMAZON-S3).
* Network Role: Web Server (3.5.0.0/16 CIDR).
* Open Ports: TCP 80 (HTTP), 443 (HTTPS), 8080 (HTTP-alt).
* TLS Certificate: Issued by Amazon RSA 2048 M01 for *.s3.us-east-2.amazonaws.com.
* Server Banner: AmazonS3.
* DNS Hygiene: Fair score (40); SPF and DMARC records confirmed.
Threat Indicators and Anomalies
* Reputation: No active threat indicators. Abuse confidence score was null.
* Neighborhood Analysis: Subnet 3.5.93.0/24 classified as mostly clean with an abuse density of 0.1429.
* Geolocation Contradiction: The profile recorded a violation where the claimed geolocation (Columbus, OH) contradicted RTT physics measurements (34ms observed versus 131.6ms minimum for the distance).
* Confidence Level: Overall data confidence was Very Low (0.2083) due to signal contradictions.
Recommendation
The system recommended monitoring the IP with low severity. No immediate firewall rules were required, but the analyst should remain vigilant for changes in the signal contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS16509 |
| Network Name | AMAZON-S3 |
| CIDR Block | 3.5.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 8080 | http-alt | tcp | — |
| Closed Ports | 22, 25, 3389, 8443 (3 open / 7 scanned) | ||
| Server | AmazonS3 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.s3.us-east-2.amazonaws.coms3.us-east-2.amazonaws.com*.s3.amazonaws.com*.s3-accesspoint.dualstack.us-east-2.amazonaws.com*.s3-control.us-east-2.amazonaws.coms3.dualstack.us-east-2.amazonaws.coms3-control.dualstack.us-east-2.amazonaws.com*.s3-deprecated.us-east-2.amazonaws.com*.s3.dualstack.us-east-2.amazonaws.coms3-control.us-east-2.amazonaws.com |
| Valid From | 2026-07-12T00:00:00+00:00 |
| Valid Until | 2027-01-25T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_CHACHA20_POLY1305_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 0366E4CE615371059E0A3D11489858AF |
| Thumbprint | C0267BE78793B1B794062FC6EC6FB45E02613DA2 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 36% | 2 | 7 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 4 |
| geolocation | 40% | 2 | 7 |
| Overall | 29% | 10 | 28 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-06 06:32:38 UTC |
| Last Seen | 2026-09-24 02:51:44 UTC |
| Profile Built | 2026-09-24 02:58:29 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 42 |
Full dossier details are available via our API.