IPDebrief

3.5.105.9

IP Intelligence Dossier
Your IP: 216.73.217.74

3.5.105.9 is an IPv4 address operated by AMAZON-02 - Amazon.com, Inc., US (AS16509), with approximate network location Columbus, United States. As of November 13, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.

{ } JSON

Witness AI IP Assessment (AI-generated)

AI-generated assessment. Verify critical details independently.

IP address 3.5.105.9/32 is assigned to Amazon Data Services Northern Virginia (AS16509) within the 3.5.0.0/16 block. Geolocation data places the network in Columbus, Ohio, United States, though this may represent an approximate location. The host is identified as a Web Server on Amazon Web Services infrastructure; conflicting observations exist between the geolocation record and the routing operator designation. No active TLS endpoints were observed during probing, and a historical certificate record associated with the *.s3.us-east-2.amazonaws.com domain indicated a future validity period extending into 2027. DNS hygiene remains unassessed, with SPF, DMARC, and CAA checks returning as not checked, and DNSSEC status listed as unknown. The risk score is currently zero, yet the absence of specific indicators and the limited scope of observations do not confirm the absence of malicious activity or fully characterize the host's operational status. Corroboration through additional traffic analysis is recommended to validate the network role and rule out potential compromise.

🌍 Geolocation

Country🇺🇸 United States
Location scopeApproximate network location. Distributed and anycast services can vary by observation point.
Anycast classificationUnverified (not proof of unicast)
RegionOH
CityColumbus
TimezoneAmerica/New_York
Latitude39.96
Longitude-83.00

🏢 Ownership & Registration

Registered holderAmazon Data Services Northern Virginia
ASNAS16509
Network NameAMAZON-S3
CIDR Block3.5.0.0/16
RIRARIN
Network registration countryUnited States
Routing operatorAMAZON-02 - Amazon.com, Inc., US
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)

DNS Posture

Results describe the queried names. SPF, DMARC and CAA are domain policies, not requirements for every IP. DNSSEC here describes reverse DNS; inconclusive validation does not mean unsigned.

Not assessed: 0 conclusive IP DNS checks.

caaNot checked
spfNot checked
dmarcNot checked
dnssecUnknown / lookup inconclusive
9.105.5.3.in-addr.arpa
fcrDnsNot checked

☁️ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierUnknown — Insufficient routing data to classify
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
80httptcp—
443httpstcp—
8080http-alttcp—
Closed Ports22, 25, 3389, 8443 (3 open / 7 scanned)
ServerWeb server detected
HTTP Title—

🔐 TLS Certificate

Historical certificate; current certificate unknown. This describes the last probe, not a live check. An IP-targeted handshake does not establish the certificate served for every hostname.
PortProbe targetCertificate finding
(IP-targeted)CN=*.s3.us-east-2.amazonaws.com
Historical certificate; current certificate unknown
🔒
CN=*.s3.us-east-2.amazonaws.com
Issued by CN=Amazon RSA 2048 M04, O=Amazon, C=US
Self-signed: No
SANs*.s3.us-east-2.amazonaws.coms3.us-east-2.amazonaws.com*.s3.amazonaws.com*.s3-accesspoint.dualstack.us-east-2.amazonaws.com*.s3-control.us-east-2.amazonaws.coms3.dualstack.us-east-2.amazonaws.coms3-control.dualstack.us-east-2.amazonaws.com*.s3-deprecated.us-east-2.amazonaws.com*.s3.dualstack.us-east-2.amazonaws.coms3-control.us-east-2.amazonaws.com
Valid From2026-09-11T00:00:00+00:00
Valid Until2027-03-27T23:59:59+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_128_GCM_SHA256
Signature Algorithmsha256RSA
Validity Period197 days

🛡️ Public Network Snapshot

Origin ASNAS16509
Network Prefix3.5.105.0/24
Route mappingFound
HSTSNot detected
CSPNot detected
HTTP/2Not detected

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
35%
23
routing
17%
11
services
35%
23
ownership
35%
23
reputation
17%
12
geolocation
24%
22
Overall27%1014
Coverage: 6/6 dimensions · Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Recent

First Seen2026-11-09 03:08:28 UTC
Last Seen2026-11-14 18:52:25 UTC
Profile Built2026-11-13 09:06:23 UTC
Data FreshnessRecent
Signal Types18
Total Observations18
🔍 18 signal types · 18 observations collected
This report is generated from 18+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 📧 Enterprise Access

❓ Frequently Asked Questions About 3.5.105.9

Who owns the IP address 3.5.105.9?

3.5.105.9 is registered to Amazon Data Services Northern Virginia. The address falls within the 3.5.0.0/16 network block. Registration is held at ARIN.

Where is 3.5.105.9 located?

Geolocation data places 3.5.105.9 in Columbus, OH, United States. The local time zone is America/New_York. IP geolocation is approximate, not a precise physical address. Registration country and certificate organization addresses do not establish service location.

Is 3.5.105.9 malicious or safe?

3.5.105.9 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.

What ports are open on 3.5.105.9?

Responsive ports observed on 3.5.105.9 include 80, 443, 8080. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.

🏘️ Related IP Addresses

Nearby addresses in 3.5.0.0/16

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.