# 3.225.190.39 — IP Intelligence Summary

3.225.190.39 is an IPv4 address operated by Amazon Data Services Northern Virginia (AS14618), geolocated to Ashburn, United States. Its reverse DNS name is ec2-3-225-190-39.compute-1.amazonaws.com. As of November 2, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/3.225.190.39
- Last updated: 2026-11-02

## Ownership

- Organization: Amazon Data Services Northern Virginia
- Network name: AMAZON-IAD
- Allocated block: 3.224.0.0/12
- ASN: AS14618 (https://ipdebrief.com/asn/14618)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Ashburn
- Region: VA
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: Unknown
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ec2-3-225-190-39.compute-1.amazonaws.com
- Forward-confirmed: yes

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

The IP address 3.225.190.39 was identified as a web server infrastructure node associated with Amazon Web Services (AS14618) located in Ashburn, Virginia. The address resolved to ec2-3-225-190-39.compute-1.amazonaws.com within the 3.224.0.0/12 CIDR block. Network scans revealed TCP ports 80 and 443 in open state, with the HTTPS certificate issued to Adobe Inc. covering domains including demdex.com and audiencemanager.adobe.com. The server returned a 404 status code on HTTP/2 requests.

Threat assessment assigned a Moderate Risk reputation score of 40. No active threat indicators were present, and the blacklist count remained at zero. The local subnet showed a clean classification with no threat siblings. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations. Despite the lack of direct malicious indicators, the asset was flagged for Medium severity risk. Analysts were advised to implement rate-limiting rules (5 requests per minute) to mitigate potential abuse. The overall confidence score for the profile was Very Low (0.1667).

## Addresses sharing infrastructure

- 3.209.224.164 — Same TLS certificate (https://ipdebrief.com/3.209.224.164)
- 3.232.214.210 — Same TLS certificate (https://ipdebrief.com/3.232.214.210)
- 23.21.78.213 — Same TLS certificate (https://ipdebrief.com/23.21.78.213)
- 34.195.65.34 — Same TLS certificate (https://ipdebrief.com/34.195.65.34)
- 34.195.231.103 — Same TLS certificate (https://ipdebrief.com/34.195.231.103)
- 34.200.108.84 — Same TLS certificate (https://ipdebrief.com/34.200.108.84)
- 100.55.206.36 — Same TLS certificate (https://ipdebrief.com/100.55.206.36)
- 100.60.45.58 — Same TLS certificate (https://ipdebrief.com/100.60.45.58)
- 184.194.66.128 — Same TLS certificate (https://ipdebrief.com/184.194.66.128)
- 184.194.199.63 — Same TLS certificate (https://ipdebrief.com/184.194.199.63)

---

Source: IPDebrief, "3.225.190.39 IP intelligence", https://ipdebrief.com/3.225.190.39, updated 2026-11-02. Assessments are probabilistic.