3.101.17.89

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP INTELLIGENCE BRIEFING: 3.101.17.89/32

Classification: LOW RISK — Legitimate Cloud Infrastructure

Date: 2026-08-13

---

OVERVIEW

IP 3.101.17.89 is a low-risk address (Risk Score: 25) belonging to Amazon Web Services. The address is classified as Amazon EC2 cloud compute infrastructure deployed in the US West (N. California) region. No malicious indicators or threat signals were identified.

OWNERSHIP & INFRASTRUCTURE

ASN: 16509 (Amazon.com, Inc.)
Organization: AMAZON-SFO
CIDR Block: 3.101.0.0/16
RIR: ARIN
Infrastructure Type: CloudCompute
Network Role: AWS Cloud Instance (Firewalled)

GEOLOCATION

Country: United States (US)
Region: California (CA)
City: San Jose
Coordinates: 37.35°N, -121.96°W
Timezone: America/Los_Angeles

NETWORK ANALYSIS

DNS Resolution: ec2-3-101-17-89.us-west-1.compute.amazonaws.com
PTR Record: Confirmed reverse DNS mapping
Forward Resolution: Valid (amazonaws.com domain)
Email Auth: SPF and DMARC records present
Open Ports: None detected
HTTP/HTTPS Services: No active services

THREAT INDICATORS

Blacklist Count: 0
Abuse Confidence Score: None
Known Campaigns: None
Tor Exit Node: No
Known Attacker: No
Spam Source: No
Cloudflare/AWS WAF Flags: None
Risk Classifications: Clean

HISTORICAL OBSERVATIONS

Eighteen signal observations collected, with the most recent from 2026-08-13. Historical data indicates:

Geographic consistency: San Jose, CA (US)
Ownership stability: No changes detected
Threat persistence: None observed
No escalation in risk profile over time

RELATIONSHIP GRAPH

DNS Associations: ec2-3-101-17-89.us-west-1.compute.amazonaws.com
Network Association: AMAZON-SFO (3.101.0.0/16)
Related Entities: 9 relationships (standard AWS EC2 DNS/network associations)

NEIGHBORHOOD ANALYSIS (3.101.17.0/24)

Subnet Classification: Clean
Abuse Density: 0.00
Active Siblings: 0
Threat Siblings: 0
Risk Distribution: No high-risk neighbors detected

RECOMMENDED ACTIONS

No security actions or firewall rules required. This IP is classified as legitimate AWS cloud infrastructure with no malicious activity detected.

SOC ANALYST NOTES

Standard AWS EC2 instance with no unusual behavior
Infrastructure appears to be part of normal cloud service operations
No blocking or rate-limiting recommended
Monitor only if traffic patterns deviate from expected cloud usage

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	CA
City	San Jose
Timezone	America/Los_Angeles
Latitude	37.35
Longitude	-121.96

🏢 Ownership & Registration

Organization	Amazon.com, Inc.
ASN	AS16509
Network Name	AMAZON-SFO
CIDR Block	3.101.0.0/16
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR	ec2-3-101-17-89.us-west-1.compute.amazonaws.com
Forward Confirmed	Yes — FCrDNS verified
Forward Hostnames	`ec2-3-101-17-89.us-west-1.compute.amazonaws.com`

🔐 DNS Hygiene

Hygiene Score	80% (Excellent)
SPF	Present
DMARC	Present
FCrDNS	Verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Firewalled / No Services
Network Tier	Tier 3 — Basic operator with some routing infrastructure

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected
Closed Ports	22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	43%	2	5
routing	34%	1	5
services	19%	2	2
ownership	27%	2	3
reputation	28%	1	3
geolocation	33%	2	4
Overall	30%	10	22

Coverage: 5/6 dimensions · Data sufficiency: partial

Data Coherence	Consistent (100%)
Attribution	Moderate (70%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-08-11 17:58:49 UTC
Last Seen	2026-08-31 00:06:50 UTC
Profile Built	2026-08-31 00:11:00 UTC
Data Freshness	Live
Signal Types	21
Total Observations	33

🔍 21 signal types · 33 observations collected

This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

3.101.17.89📋 Copy