IPDebrief

100.25.120.246

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## IP Intelligence Briefing: 100.25.120.246/32

Classification: LEGITIMATE INFRASTRUCTURE β€” No Threat Indicators

Risk Assessment: LOW RISK (Score: 25/100)

Assessment Date: Current

---

Ownership & Infrastructure Profile

Organization: Amazon Data Services Northern Virginia (AS14618)

Network Name: AMAZON-IAD

CIDR Block: 100.24.0.0/13

Location: Ashburn, Virginia, United States

Infrastructure Type: AWS Cloud Infrastructure

The target IP is assigned to Amazon Web Services and operates within the AMAZON-IAD data center network in Northern Virginia. Ownership is stable with no observed changes during the observation period.

---

DNS & Network Services

PTR Record: 100-25-120-246.crawl.amazonbot.amazon

Forward Resolution: Confirmed to amazonbot.amazon domain

Open Ports: None detected

Service Status: Firewalled / No Services Available

The reverse DNS record identifies this IP as part of Amazon's web crawler bot infrastructure (amazonbot.amazon). No open ports or active services are exposed, consistent with AWS infrastructure security practices.

---

Threat Intelligence Summary

Threat Indicators: None

Blacklist Status: Listed on 1 of 8 DNSBLs (minimal impact)

Known Campaigns: None

Tor Exit Node: No

Known Attacker: No

Spam Source: No

Abuse Confidence Score: Not applicable

No threat indicators, malware signatures, or attack campaign associations detected. The IP shows no evidence of malicious activity.

---

Neighborhood Analysis

Subnet: 100.25.120.246/24

Abuse Density: 0%

High-Risk Neighbors: 0

Medium-Risk Neighbors: 0

Low-Risk Neighbors: 0

Threat Siblings: 0

The /24 subnet contains no neighboring IPs flagged for abuse or threat activity. No inherited risk from adjacent addresses.

---

Historical Observation Data

Total Observations: 17

Most Recent Signal: 2026-07-30 11:00:38 UTC

Threat Persistence Days: 0

Ownership Changes: 0

Observation history indicates consistent infrastructure behavior with no escalation in threat signals over time. The IP demonstrates stable operational characteristics consistent with legitimate AWS crawler operations.

---

Related Entities

DNS Associations: 100-25-120-246.crawl.amazonbot.amazon

Network Associations: AMAZON-IAD (2 occurrences)

All relationships are internal to Amazon infrastructure, with no external organizational or third-party connections.

---

Recommended Actions

No Blocking Recommended

This IP represents legitimate Amazon Web Services infrastructure used for web crawling operations. No firewall rules or blocking actions are warranted. Standard allow-listing or monitoring as benign traffic is appropriate.

---

Analyst Notes: The PTR hostname pattern (crawl.amazonbot.amazon) and AWS network attribution confirm this is crawler infrastructure, not a compromised host or malicious actor. The low risk score and absence of threat indicators support treating this as trusted infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionVA
CityAshburn
TimezoneAmerica/New_York
Latitude39.04
Longitude-77.49

🏒 Ownership & Registration

OrganizationAmazon Data Services Northern Virginia
ASNAS14618
Network NameAMAZON-IAD
CIDR Block100.24.0.0/13
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR100-25-120-246.crawl.amazonbot.amazon
Forward ConfirmedYes β€” FCrDNS verified
Forward Hostnames100-25-120-246.crawl.amazonbot.amazon

πŸ” DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSVerified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierTier 3 β€” Basic operator with some routing infrastructure
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
30%
23
routing
13%
11
services
19%
22
ownership
27%
23
reputation
17%
12
geolocation
32%
23
Overall23%1014
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-07-27 05:06:09 UTC
Last Seen2026-08-12 21:21:21 UTC
Profile Built2026-08-12 21:38:00 UTC
Data FreshnessLive
Signal Types21
Total Observations23
πŸ” 21 signal types Β· 23 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.