3.129.92.250📋 Copy

# IP Intelligence Briefing: 3.129.92.250/32

## Executive Summary

IP 3.129.92.250 is a low-risk (25) Amazon Web Services (AWS) EC2 instance located in the US East (Ohio) region. The address is classified as cloud infrastructure with minimal threat indicators. No immediate blocking is recommended, but monitoring for DNSBL listings and SSH traffic is advised.

## Ownership and Infrastructure

• Organization: Amazon Technologies Inc. (ASN 16509)
• Network Block: 3.128.0.0/9 (AT-88-Z)
• Infrastructure Type: CloudCompute (AWS EC2)
• Service Purpose: Single-Service Host
• Infrastructure Classification: Cloud hosting environment

## Geolocation Data

• Country: United States (US)
• Region/State: Ohio (OH)
• City: Columbus
• Coordinates: 39.96, -83.00
• Timezone: America/New_York

## Network Services

• Open Ports: TCP/22 (SSH)
• SSH Banner: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16
• DNS Resolution: ec2-3-129-92-250.us-east-2.compute.amazonaws.com
• DNSSEC: Valid

## Threat Intelligence Profile

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• Known Campaigns: None detected
• Threat Feeds: Empty

## Control Plane Analysis

• Origin ASN: 16509 (Amazon.com, Inc.)
• BGP Prefix: 3.128.0.0/15
• Route Stability: Unstable (isRouteStable: false)
• DNSSEC Validation: Valid
• DNSBL Listings: 1 of 8 lists (minor concern)
• RPKI State: Not configured
• IRR Consistency: Not configured

## Neighborhood Analysis

• Subnet: 3.129.92.250/24
• Abuse Density: 0%
• Classification: Clean
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0
• Threat Siblings: 0

## Observation History

• Total Observations: 22
• Recent Activity: Signals detected on 2026-06-21
• Signal Types: ASN, geolocation, DNS, routing, services, reputation
• Threat Persistence: 0 days (not persistently malicious)
• Ownership Changes: 0

## Relationship Graph

• Total Relationships: 41
• Same Network: AT-88-Z (Amazon network)
• DNS Associations: ec2-3-129-92-250.us-east-2.compute.amazonaws.com
• Related Entities: Multiple network-level associations

## Geo Validation Alert

• Distance Discrepancy: 6,580.9 km
• RTT Violation: 37ms minimum RTT is below the theoretical minimum of 131.6ms for the reported distance
• Impact: This suggests potential geolocation inference inaccuracy or probe routing anomalies

## Recommended Actions

No immediate security actions are required. The following monitoring recommendations apply:

1. Monitor DNSBL Listings: Track the single DNSBL listing across the 8 total lists

2. SSH Traffic Analysis: Monitor inbound SSH traffic for anomalous patterns

3. Route Stability: Investigate BGP route instability (isRouteStable: false)

4. Geo Validation: Consider alternative geolocation sources due to RTT/distance discrepancy

## Conclusion

IP 3.129.92.250 represents a legitimate AWS cloud infrastructure endpoint with low-risk characteristics. The address exhibits standard cloud computing behavior with no evidence of malicious activity. The RTT/distance validation discrepancy and minor DNSBL listing warrant routine monitoring but do not indicate active threat activity. No firewall rules or blocking recommendations are generated at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.