3.89.49.71📋 Copy

# IP Intelligence Briefing: 3.89.49.71/32

Classification: LOW RISK — Legitimate Cloud Infrastructure

Risk Score: 25/100

Reporting Period: Multiple observations (June 2026)

---

## Executive Summary

IP 3.89.49.71 is a low-risk Amazon Web Services (AWS) EC2 instance hosted in the Northern Virginia (IAD) region. The address exhibits standard cloud compute characteristics with no threat indicators, open services, or abuse activity. No firewall blocking is recommended.

---

## Infrastructure Profile

DNS Resolution: ec2-3-89-49-71.compute-1.amazonaws.com (forward confirmed)

Network Classification: Cloud compute with firewalled/no services exposed

Email Authentication: SPF and DMARC records present

---

## Threat Assessment

Risk Score: 25/100 — Low Risk

Abuse Confidence: None

Blacklist Status: Clean (0 entries)

Known Campaigns: None

Tor Exit Node: No

Known Attacker: No

Spam Source: No

Services Exposed: None (firewalled)

Open Ports: None detected

TLS Certificate: None (no HTTP service)

---

## Neighborhood Analysis

Subnet: 3.89.49.71/24

Abuse Density: 0/255 (Clean)

Classification: Mostly Clean

Threat Siblings: 0

Risk Inheritance: 2/255 (Minimal)

The /24 subnet contains minimal activity with no concentrated abuse patterns.

---

## Observation History (Last 24 Observations)

• Total Signals: 24 observations tracked
• Geolocation Consistency: Consistent Ashburn, VA (confidence 0.56)
• Operator Score: 0.2609 (Basic)
• Threat Persistence: 0 days (not persistently malicious)
• Recent Activity: Signals recorded June 14 and June 19, 2026

No escalation in threat indicators observed over the observation period.

---

## Relationship Graph

Total Relationships: 69 associations

DNS Associations: ec2-3-89-49-71.compute-1.amazonaws.com

Network Associations: AMAZON-IAD (Northern Virginia AWS Region)

Relationships confirm legitimate AWS infrastructure deployment.

---

## Recommended Security Actions

No Action Required. The IP address represents standard cloud infrastructure with no malicious indicators. No firewall rules or WAF configurations are recommended.

Context for SOC: This is a benign AWS EC2 instance. Traffic patterns consistent with cloud compute workloads may appear but should be evaluated in context of network policies rather than flagged as suspicious.

---

*Report generated: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.