IP Profile

🖥 3.94.113.234 — Amazon.com, Inc.

Amazon.com, Inc. · AS14618 · US · 3.94.113.0/24 · Proxy/Anon · threat 0.50 · 2x · 2 sources · PTR ec2-3-94-113-234.compute-1.amazonaws.com

reputation 42.7 (ELEVATED) · first seen Aug 06, 2026 · last seen Aug 06, 2026
No special flags proxy ip medium-severity auto-tagged
🔄 Pivot:🌐 AS14618🏢 Amazon🌎 US📁 Proxy/Anon

Reputation

42.7
ELEVATED

Threat Score

0.50
2 sightings

ASN

AS14618
from indicator

Peers on ASN

96
malicious co-tenants

Bad neighborhood

6
3.94.113.0/24

Country

US
from indicator
PIVOT🖥 IP Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP3.94.113.234
OrganizationAmazon.com, Inc.
ASNAS14618
Netname—
Netblock—
Reverse DNS (PTR)ec2-3-94-113-234.compute-1.amazonaws.com
CountryUS country intel

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS14618 neighborhood)

High (.5-.75)
97
Avg threat 0.5 · peak 0.5 across 97 local IPs on AS14618

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

medium-severity
95
ip
95
auto-tagged
95
proxy
39

🔌 Sources (ASN neighborhood)

FireHOL proxies
39
FireHOL anonymous
39
FireHOL: firehol_abusers_30d.netset
18
FireHOL: cleantalk_updated_30d.ipset
18
FireHOL: cleantalk_new_30d.ipset
13
FireHOL abusers 30d
11
IPsum Level 1
11
IPsum level 1 (all)
11
IPsum Level 2
10
stamparm ipsum
6
FireHOL: cleantalk_new_7d.ipset
6
FireHOL: firehol_abusers_1d.netset
4
FireHOL: cleantalk_new_1d.ipset
4
FireHOL: stopforumspam.ipset
4

🌎 Geographic spread

96

📅 First-seen timeline

2026-08
97

Reporting Sources for this IP (2)

FireHOL proxiesProxy/Anon
FireHOL anonymousProxy/Anon

Passive DNS — domains resolving here (1)

3.94.113.234 2026-08-29 09:41:00

🏠 Same /24 — 3.94.113.0/24 (6 other malicious IPs)

Other flagged IPs in the same /24 — a concentration here suggests a compromised or abused block.

IPCategoryFamilyThreat
3.94.113.81 Proxy/Anon- dossier
3.94.113.94 Proxy/Anon- dossier
3.94.113.114 Proxy/Anon- dossier
3.94.113.223 Proxy/Anon- dossier
3.94.113.255 Proxy/Anon- dossier
3.94.113.228 IP Blocklists- dossier
All in this subnet Bulk takedown

📡 Related indicators on AS14618 (96 total, 40 shown)

IPCategoryCountryThreat
3.91.254.194 EnrichedUS dossier
3.236.248.81 IP BlocklistsUS dossier
32.195.241.139 IP BlocklistsUS dossier
54.175.167.220 DNS A recordUS dossier
44.220.188.49 ReputationUS dossier
44.220.188.251 ReputationUS dossier
44.220.188.215 ReputationUS dossier
44.220.188.124 ReputationUS dossier
44.220.188.119 ReputationUS dossier
3.95.249.200 Proxy/AnonUS dossier
3.94.113.255 Proxy/AnonUS dossier
3.93.153.160 Proxy/AnonUS dossier
3.93.11.254 Proxy/AnonUS dossier
3.93.11.171 Proxy/AnonUS dossier
3.92.169.188 Proxy/AnonUS dossier
3.92.169.183 Proxy/AnonUS dossier
3.92.169.124 Proxy/AnonUS dossier
3.92.127.155 Proxy/AnonUS dossier
3.92.127.113 Proxy/AnonUS dossier
3.91.250.195 Proxy/AnonUS dossier
3.91.250.193 Proxy/AnonUS dossier
3.90.227.212 Proxy/AnonUS dossier
3.90.227.191 Proxy/AnonUS dossier
3.88.129.210 Proxy/AnonUS dossier
3.88.129.169 Proxy/AnonUS dossier
3.87.168.179 Proxy/AnonUS dossier
3.87.168.107 Proxy/AnonUS dossier
3.87.109.198 Proxy/AnonUS dossier
3.87.41.41 Proxy/AnonUS dossier
3.86.234.185 Proxy/AnonUS dossier
3.81.222.206 Proxy/AnonUS dossier
3.81.222.145 Proxy/AnonUS dossier
3.81.222.102 Proxy/AnonUS dossier
3.81.200.111 Proxy/AnonUS dossier
3.81.186.203 Proxy/AnonUS dossier
3.81.186.199 Proxy/AnonUS dossier
3.81.135.253 Proxy/AnonUS dossier
3.81.135.211 Proxy/AnonUS dossier
3.81.135.156 Proxy/AnonUS dossier
3.81.130.215 Proxy/AnonUS dossier
Full ASN dossier →

Case & Takedown Links

No cases or takedowns yet.

+ Case Takedown

Enrichments

ipinfo ipinfo

Stored Enrichment Data Enrich Now

2 enrichment records on file (history preserved).

🔍 OSINT pivots — external lookups

Shodan →Censys →GreyNoise →AbuseIPDB →VirusTotal →ipinfo →BGP.HE →RIPEstat →OTX →ThreatFox →Pulsedive →OpenSanctions →

🔗 Internal pivots & actions

Advanced Search →OSINT Pivot →Link Analysis →Infrastructure →Passive DNS →Timeline →ASN dossier →ASN co-tenants →Country intel →Add to case →Export STIX/MISP →

📁 Case Management

+ New case from this
← IP Index
Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Resolve linkage batchBulk OTX enrich

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

ASN AnalysisLink AnalysisOSINT