# IP Intelligence Briefing: 35.166.109.150/32
## Executive Summary
IP address 35.166.109.150 is a low-risk infrastructure asset operated by Amazon Web Services. No active threat indicators or malicious campaign associations detected. No immediate blocking action recommended.
## Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 25/100 (Low Risk) |
| **Organization** | Amazon.com, Inc. (ASN 16509) |
| **Network** | AMAZO-ZPDX9 (35.160.0.0/13) |
| **Location** | Portland, Oregon, US |
| **Infrastructure Type** | AWS EC2 Instance |
| **DNS Hostname** | ec2-35-166-109-150.us-west-2.compute.amazonaws.com |
## Threat Assessment
Current Threat Status: CLEAN
- Known Attackers: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0 (1 DNSBL listing among 8 total lists)
- Active Threat Indicators: None
- Associated Campaigns: None
Network Neighborhood: The /24 subnet (35.166.109.0/24) shows zero abuse density with no threat-adjacent neighbors. Classification: CLEAN.
## Historical Signals (21 Observations)
Observation timeline indicates stable infrastructure characteristics:
- Most Recent: 2026-08-05 β Operator score: Basic (0.2609)
- Mid-Range: 2026-07-30 β Subnet classification: CLEAN; Abuse density: 0
- Trend: No escalation in risk signals. No new threat indicators observed.
Validation Notes: ICMP validation failed (blocked). Geo-location plausible (7,950.7 km distance from probe origin).
## DNS & Services Analysis
- PTR Record: ec2-35-166-109-150.us-west-2.compute.amazonaws.com
- Forward Resolution: Confirmed (1 hostname)
- Open Ports: None detected
- TLS Certificate: None exposed
- Service Banner: None (firewalled/no services exposed)
- Email Auth: SPF and DMARC records present
## Infrastructure Context
This IP represents a standard AWS EC2 instance in the us-west-2 (Oregon) region. The hostname format and network assignment are consistent with AWS infrastructure patterns. No evidence of compromised state or adversarial use.
## Recommended Actions
| Platform | Recommendation |
|---|---|
| **Firewall Rules** | No blocking required |
| **SIEM Rules** | No correlation needed |
| **WAF** | No blocking rules |
| **Monitoring** | Standard logging sufficient |
Action Priority: LOW β No immediate defensive action required.
## Conclusion
IP 35.166.109.150 exhibits characteristics of benign AWS cloud infrastructure. The low risk score (25), clean neighborhood classification, and absence of threat indicators support continued monitoring without restrictive controls. No further investigation warranted at this time.
---
*Report generated via IPDebrief Intelligence Platform. Data current as of analysis timestamp.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-ZPDX9 |
| CIDR Block | 35.160.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-35-166-109-150.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-35-166-109-150.us-west-2.compute.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-27 21:54:31 UTC |
| Last Seen | 2026-08-12 22:00:44 UTC |
| Profile Built | 2026-08-12 22:16:48 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 28 |
Full dossier details are available via our API.