3.91.148.177📋 Copy

Threat Intelligence Briefing: IP 3.91.148.177/32

Entity Overview

• IP Address: 3.91.148.177/32
• Geolocation: Ashburn, Virginia, US (AWS data center)
• Ownership: Amazon Data Services (AS14618)
• Network Role: AWS CloudCompute instance (firewalled, no public services)
• Risk Profile: Low Risk (riskScore: 25)

Key Findings

1. Legitimate Infrastructure:

- Associated with Amazon Web Services (AWS) infrastructure.

- No malicious indicators (no malware, spam, or known attacker activity).

- DNS records point to `ec2-3-91-148-177.compute-1.amazonaws.com`.

2. Network Stability

- BGP routes are stable (AS14618, AS16509, AS11537).

- DNSSEC validation is enabled, and DNSBL listings are minimal.

- No recent changes in ownership or threat signals.

3. Observation History

- Historical data shows consistent geolocation in Ashburn, VA.

- No spikes in threat activity or network anomalies.

4. Neighbor Analysis

- No neighboring IPs identified in the /24 subnet (likely a single-host subnet).

- Subnet abuse density is zero.

Recommendations

• No immediate action required for this IP, as it is a legitimate AWS EC2 instance.
• Monitor for unexpected changes in network behavior or new associated domains.
• Maintain standard security policies for AWS infrastructure.

Conclusion

This IP is a standard AWS cloud instance with no signs of malicious activity. SOC teams should focus on monitoring for deviations from baseline behavior rather than blocking this IP.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.