3.111.149.191📋 Copy

# IP Intelligence Briefing: 3.111.149.191/32

## Executive Summary

This IP address represents a low-risk, legitimate cloud infrastructure resource hosted on Amazon Web Services (AWS) in Mumbai, India. The IP shows no active threat indicators, maintains stable ownership, and operates within a clean network neighborhood. No immediate security action is recommended.

---

## Infrastructure Profile

Ownership & Provider:

• ASN: 16509 (Amazon.com, Inc., US)
• Organization: Amazon Data Services India
• Network: AMAZON-BOM (AWS Mumbai Region)
• RIR: ARIN
• Registration: 2017-12-20

Geolocation:

• Country: India (IN)
• Region: Maharashtra (MH)
• City: Mumbai
• Coordinates: 19.08°N, 72.88°E
• Timezone: Asia/Kolkata

Network Classification:

• Infrastructure Type: CloudCompute
• Hosting Provider: Yes
• ISP/Proxy/Tor: No
• Anycast: No

---

## Threat Assessment

Risk Score: 25 / 100 (Low Risk)

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Known Campaigns: None

Control Plane Data:

• BGP Prefix: 3.108.0.0/14
• Route Stability: Fluctuating
• DNSBL Listed: 1 of 8 total lists (likely false positive for cloud infrastructure)
• RPKI State: Not reported

---

## DNS & Services

DNS Records:

• PTR Hostname: ec2-3-111-149-191.ap-south-1.compute.amazonaws.com
• Forward Resolution: Confirmed
• Hosted Domains: None
• SPF/DMARC: Present on hosted domain

Service Exposure:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None

---

## Network Neighborhood Analysis

Subnet: 3.111.149.191/24

• Abuse Density: 0% (Low)
• Classification: Mostly Clean
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1

The /24 subnet shows minimal abuse activity with only 1 active sibling IP detected. The neighborhood is classified as clean with inherited risk of 2.

---

## Historical Observations

Total Signals: 21 observations

Recent signal timeline:

• 2026-06-20: DNS blacklist listings (8 total, 0 current)
• 2026-06-15: ASN and routing data confirmed (US registry)
• 2026-06-10: Geolocation inference (Mumbai, India)

Signal confidence ranges from 0.26 to 0.85. No persistent malicious activity detected. Threat observation count: 1.

---

## Relationships Graph

Identified Associations (33 total):

• DNS Associations: ec2-3-111-149-191.ap-south-1.compute.amazonaws.com
• Network Associations: AMAZON-BOM
• No external organization or certificate correlations

All relationships point to AWS cloud infrastructure with no malicious entity links.

---

## Recommended Actions

Immediate Action: NONE REQUIRED

This IP represents standard AWS cloud infrastructure with:

• Low risk score (25)
• No threat indicators
• Clean neighborhood profile
• Legitimate DNS and ownership records

Monitoring: Continue standard cloud infrastructure monitoring. No firewall blocking or allowlisting required.

---

## Conclusion

IP 3.111.149.191 is a legitimate AWS EC2 instance in the Mumbai region with no observable malicious activity. The single DNSBL listing is likely a false positive common for cloud providers. No defensive actions are recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.