Intelligence Briefing: 100.27.77.180
Overview
The IP address 100.27.77.180 was identified as a low-risk infrastructure endpoint associated with Amazon Data Services Northern Virginia (ASN 14618). Ownership records attributed the address to the AMAZON-IAD organization within the 100.24.0.0/13 CIDR block. Geolocation data localized the asset to Ashburn, Virginia, USA.
Infrastructure and Services
Passive DNS resolution confirmed the address as an Amazon EC2 instance (ec2-100-27-77-180.compute-1.amazonaws.com). The host accepted connections on TCP ports 80 and 443. Server banner analysis identified the platform as "Extole" running HTTP/2.0. TLS certificate inspection revealed a Let's Encrypt certificate issued for the domain *.extole.io.
Threat Profile
The asset carried a risk score of 25 and a reputation status of "Low Risk." While the control plane monitoring noted one DNSBL listing out of eight total lists, no specific known campaigns or attack indicators were recorded. The threat actor classification tagged the host as "Suspicious Host." Behavioral analysis detected zero honeypot hits, enumeration strikes, or WAF violations. The subnet (100.27.77.0/24) was classified as mostly_clean with one threat sibling.
Recommendation
Analysis concluded with a recommendation to monitor the activity. The asset was flagged for low-severity attention due to its location in a mostly_clean neighborhood and the presence of threat indicators without confirmed malicious classification.
Observation Period
Signals were recorded between September 1 and September 16, 2026.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS14618 |
| Network Name | AMAZON-IAD |
| CIDR Block | 100.24.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-100-27-77-180.compute-1.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-100-27-77-180.compute-1.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/4 domains |
| DMARC | 4/4 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Extole |
| HTTP Title | β |
π TLS Certificate
| SANs | *.extole.io |
| Valid From | 2026-07-27T12:10:47+00:00 |
| Valid Until | 2026-10-25T12:10:46+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 06ADF1F3F81C71284B33DF0641098FEB2766 |
| Thumbprint | 1D43ADC76F2D3654CCC0C3655CF0214209095BC6 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 4 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 27% | 2 | 3 |
| Overall | 26% | 10 | 23 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-01 20:20:50 UTC |
| Last Seen | 2026-09-16 05:22:17 UTC |
| Profile Built | 2026-09-16 05:33:30 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 39 |
Full dossier details are available via our API.