3.89.191.143
The IP address 3.89.191.143 was identified as an Amazon Web Services resource within the AMAZON-IAD network block (ASN 14618). Ownership data linked the address to Amazon Data Services Northern Virginia, with geolocation placing the infrastructure in Ashburn, Virginia.
Threat analysis assigned a low-risk reputation score with zero observed indicators of compromise. The address maintained a clean abuse confidence profile, registering no blacklist hits or association with known attack campaigns, spam sources, or Tor exit nodes.
Technical observations confirmed open TCP port 443. Reverse DNS resolution returned ec2-3-89-191-143.compute-1.amazonaws.com. Active TLS traffic utilized a certificate issued to nvts.co by GoDaddy. The primary hosting domain demonstrated configured SPF and DMARC records.
No evidence of malicious activity or non-standard network behavior was detected.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS14618 |
| Network Name | AMAZON-IAD |
| CIDR Block | 3.80.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-3-89-191-143.compute-1.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-3-89-191-143.compute-1.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
CN=nvts.co was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | nvts.cowww.nvts.co |
| Valid From | 2024-03-07T10:49:56+00:00 |
| Valid Until | 2025-03-26T08:14:23+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 383 days |
| Serial Number | 3A8D17AD4FE4E785 |
| Thumbprint | 601F052AD7A6D61ED46C7E5D721C773C6CC6A578 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 26% | 7 | 8 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 21:31:46 UTC |
| Last Seen | 2026-08-29 21:31:46 UTC |
| Profile Built | 2026-08-29 21:41:45 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.