# 3.5.130.199 — IP Intelligence Summary

3.5.130.199 is an IPv4 address operated by Amazon Data Services Northern Virginia (AS16509), geolocated to Columbus, United States. It belongs to datacenter or hosting infrastructure. As of November 3, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/3.5.130.199
- Last updated: 2026-11-03

## Ownership

- Organization: Amazon Data Services Northern Virginia
- Network name: AMAZON-S3
- Allocated block: 3.5.0.0/16
- ASN: AS16509 (https://ipdebrief.com/asn/16509)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Columbus
- Region: OH
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https
- 8080/tcp — http-alt

## Analyst narrative

**Intelligence Briefing: 3.5.130.199/32**

**Overview:** The IP was identified as an Amazon Web Services CloudCompute endpoint (ASN 16509, AMAZON-S3). The overall risk score was recorded at 25, classified as Low Risk.

**Technical Details:** Open services included HTTP (port 80), HTTPS (port 443), and HTTP-Alt (port 8080). TLS certificate analysis confirmed the subject as *.s3.us-east-2.amazonaws.com.

**Threat Context:** No known attack campaigns or threat indicators were associated with the address. While general blacklist counts were 0, one DNSBL listing was observed within a total of 8 lists.

**Anomalies:** A contradiction was flagged between claimed geolocation (Columbus, OH) and RTT physics measurements. The system calculated a distance of 6580km with a minimum possible RTT of 131.6ms, while the observed RTT was 33.0ms.

**Recommendation:** Action was recommended to Monitor with low severity. The reason cited was the presence of signal contradictions requiring observation for changes.

## Nearby addresses

- 3.5.130.3 (https://ipdebrief.com/3.5.130.3)
- 3.5.130.9 (https://ipdebrief.com/3.5.130.9)
- 3.5.130.14 (https://ipdebrief.com/3.5.130.14)
- 3.5.130.18 (https://ipdebrief.com/3.5.130.18)
- 3.5.130.22 (https://ipdebrief.com/3.5.130.22)
- 3.5.130.25 (https://ipdebrief.com/3.5.130.25)
- 3.5.130.31 (https://ipdebrief.com/3.5.130.31)
- 3.5.130.37 (https://ipdebrief.com/3.5.130.37)
- 3.5.130.50 (https://ipdebrief.com/3.5.130.50)
- 3.5.130.56 (https://ipdebrief.com/3.5.130.56)
- 3.5.130.57 (https://ipdebrief.com/3.5.130.57)
- 3.5.130.69 (https://ipdebrief.com/3.5.130.69)

---

Source: IPDebrief, "3.5.130.199 IP intelligence", https://ipdebrief.com/3.5.130.199, updated 2026-11-03. Assessments are probabilistic.