3.114.141.120
Intelligence Briefing: 3.114.141.120/32
Summary:
The IP address 3.114.141.120/32 is a Low Risk host (Risk Score: 25) registered to Amazon Data Services Japan (ASN 16509, AMAZON-NRT). The address falls within the 3.112.0.0/14 CIDR block.
Technical Profile:
Network scans identified port 443/TCP (HTTPS) as open, operating over HTTP/2.0 with a 404 status response. DNS resolution confirmed the hostname ec2-3-114-141-120.ap-northeast-1.compute.amazonaws.com. The TLS certificate asserted Samsung, Inc. (C=KR), which conflicts with the primary geolocation attribution of Tokyo, JP. Geo-validation noted a distance violation of 9212.3 km, indicating signal contradictions between location and certificate issuer.
Threat Assessment:
No threat indicators, blacklist entries, or known campaign associations were detected. Behavioral metrics recorded zero honeypot hits, enumeration strikes, or WAF violations. The operator score is labeled as "Minimal," and DNS hygiene is rated "Good" (SPF, DMARC present).
Recommendation:
Due to the presence of signal contradictions (Geography vs. Certificate Issuer) and a Very Low confidence rating (0.125), the recommended action is to Monitor the address with Low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Japan |
| ASN | AS16509 |
| Network Name | AMAZON-NRT |
| CIDR Block | 3.112.0.0/14 |
| RIR | ARIN |
| Country | Japan |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-3-114-141-120.ap-northeast-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-3-114-141-120.ap-northeast-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsunghrm.comlocalhost127.0.0.1 |
| Valid From | 2018-08-08T02:06:36+00:00 |
| Valid Until | 2048-07-31T02:06:36+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 10950 days |
| Serial Number | 00D5D3DFC69D30EFC6 |
| Thumbprint | 167FBA5653F787D5092C6FEAC3879D24B4CAF82F |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says JP
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-19 05:17:49 UTC |
| Last Seen | 2026-09-19 05:17:49 UTC |
| Profile Built | 2026-09-19 05:30:56 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 25 |
Full dossier details are available via our API.