IPDebrief

3.120.250.78

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## IP Intelligence Briefing: 3.120.250.78/32

Date: August 5, 2026

Classification: LOW RISK โ€” Cloud Infrastructure

---

Executive Summary

IP address 3.120.250.78 is a benign Amazon Web Services EC2 instance located in Frankfurt, Germany. The address exhibits no malicious indicators, threat activity, or anomalous behavior. Recommended action: No blocking or filtering required.

---

Ownership and Network Context

AttributeValue
**Organization**A100 ROW GmbH
**Network Name**AMAZO-ZFRA
**ASN**16509 (Amazon.com, Inc.)
**CIDR Block**3.120.0.0/14
**RIR**ARIN
**Location**Frankfurt, Germany (EU-Central-1)

The IP belongs to Amazon Web Services infrastructure, specifically the AMAZO-ZFRA network block. This is confirmed by DNS PTR resolution to `ec2-3-120-250-78.eu-central-1.compute.amazonaws.com`.

---

Risk Assessment

MetricValueAssessment
**Risk Score**0Clean
**Abuse Confidence**NoneNo abuse indicators
**Blacklist Count**0Not listed
**Threat Indicators**NoneNo threats detected
**Known Campaigns**NoneNo campaign associations

Threat Indicators:

---

Network Activity and Services

Service TypeStatus
**Open Ports**None detected
**HTTP/HTTPS**No active web services
**DNS Resolution**Forward-confirmed to AWS hostname
**Email Auth**SPF/DMARC configured (domain: amazonaws.com)
**TLS/Certificates**None detected
**Network Role**Firewalled / No Services

The IP is classified as firewalled with no active services exposed. This is typical for backend EC2 instances that are not directly accessible from the internet.

---

Neighborhood Analysis

MetricValue
**Subnet**3.120.250.78/24
**Abuse Density**0.0
**Classification**Clean
**Threat Siblings**0
**Active Siblings**0

The /24 subnet shows zero abuse density with no neighboring threat IPs. This indicates the IP is operating within a clean cloud infrastructure environment.

---

Relationship Graph

The IP has established relationships exclusively with:

No relationships to external organizations, suspicious hostnames, or malicious entities were identified.

---

Historical Observation

---

Control Plane and Routing

AttributeValue
**Route Stability**Stable
**BGP Prefix**3.120.0.0/14
**DNSSEC**Valid
**RPKI State**Valid
**Hops to Origin**30
**RTT**0.1ms (first hop), 88.2ms (last hop)

---

Recommended Actions

No action required. This IP represents standard AWS cloud infrastructure with no malicious indicators.

For SOC/Security Teams:

---

Conclusion

3.120.250.78/32 is a clean, unremarkable AWS EC2 instance in Frankfurt. All threat intelligence checks return negative results. The IP exhibits no behavior consistent with malicious activity and is associated only with legitimate Amazon infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
RegionHE
CityFrankfurt
TimezoneEurope/Berlin
Latitude50.11
Longitude8.68

๐Ÿข Ownership & Registration

OrganizationA100 ROW GmbH
ASNAS16509
Network NameAMAZO-ZFRA
CIDR Block3.120.0.0/14
RIRARIN
CountryGermany
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRec2-3-120-250-78.eu-central-1.compute.amazonaws.com
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesec2-3-120-250-78.eu-central-1.compute.amazonaws.com

๐Ÿ” DNS Hygiene

Hygiene Score80% (Excellent)
SPFPresent
DMARCPresent
FCrDNSVerified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierTier 3 โ€” Basic operator with some routing infrastructure
Cloud

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
31%
24
routing
13%
11
services
19%
22
ownership
30%
23
reputation
28%
13
geolocation
13%
11
Overall22%914
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-26 09:12:27 UTC
Last Seen2026-08-12 20:24:33 UTC
Profile Built2026-08-12 20:52:17 UTC
Data FreshnessLive
Signal Types23
Total Observations30
๐Ÿ” 23 signal types ยท 30 observations collected
This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.