3.101.178.1
Intelligence Briefing: 3.101.178.1/32
Ownership and Infrastructure
The IP address was attributed to Amazon.com, Inc. (ASN 16509) within the AMAZON-SFO block (3.101.0.0/16). Forward and reverse DNS resolution confirmed the host as an EC2 instance (ec2-3-101-178-1.us-west-1.compute.amazonaws.com). Network role analysis indicated a firewalled AWS infrastructure with no open ports or active services.
Threat Status
Reputation was classified as Low Risk with a risk score of 20. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations. No threat indicators, blacklists, known campaigns, or active attacker flags were associated with the address.
Data Validation
Validation identified a contradiction where claimed geolocation contradicted RTT physics measurements (90ms RTT observed versus 177.2ms minimum for 8860km distance). Overall confidence remained Very Low due to insufficient data to classify intent.
Recommendation
Analysts were advised to monitor the IP for changes due to signal contradictions present. The severity was rated as Low.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-SFO |
| CIDR Block | 3.101.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-3-101-178-1.us-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-3-101-178-1.us-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-20 02:13:54 UTC |
| Last Seen | 2026-09-20 02:13:54 UTC |
| Profile Built | 2026-09-23 04:02:22 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.