100.61.225.20
100.61.225.20 is an IPv4 address operated by Amazon Data Services Northern Virginia (AS14618), geolocated to Ashburn, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name ec2-100-61-225-20.compute-1.amazonaws.com. As of November 2, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.
Intelligence Briefing: 100.61.225.20/32
Executive Summary
The intelligence profile classified 100.61.225.20/32 as High Risk with a score of 70. Attribution identified the asset as Amazon Data Services Northern Virginia (AS14618) within the CIDR block 100.48.0.0/12, geolocated to Ashburn, VA. Network role analysis confirmed the asset as a Web Server hosted on AWS infrastructure.
Threat Intelligence
Threat analysis assigned a high likelihood to campaign infrastructure classification, correlating the IP with 25 associated addresses and certificate subjects matching fls-na.amazon.com. While the threat indicators list remained empty and blacklist count was zero, the intelligence platform generated a critical severity recommendation to block the address. Neighborhood analysis reported a clean subnet with zero abuse density among siblings.
Recommended Actions
The system recommended blocking traffic from 100.61.225.20/32 at critical severity. Firewall rules were generated for iptables, nginx, and pf environments to drop or deny the source IP.
Technical Attributes
- Services: TCP/80 (HTTP), TCP/443 (HTTPS)
- Certificate: CN=fls-na.amazon.com (Amazon RSA 2048 M04)
- DNS: ec2-100-61-225-20.compute-1.amazonaws.com
- Confidence: Overall confidence 20.83%, Data Sufficiency 83.33%
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS14618 |
| Network Name | AMAZON-IAD |
| CIDR Block | 100.48.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-100-61-225-20.compute-1.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-100-61-225-20.compute-1.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 6/8 domains |
| DMARC | 5/8 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 8 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | fls-na.amazon.comfls-na.amazon.com.mxgateway.prod.us-east-1.forester.a2z.comfls-na.amazon.clfls-na.amazon.com.brfls-na.amazon.cafls-na.amazon.com.coendpoint.prod.us-east-1.forester.a2z.com |
| Valid From | 2026-08-04T00:00:00+00:00 |
| Valid Until | 2027-02-17T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
🛡️ Public Network Snapshot
| Origin ASN | AS14618 |
| Network Prefix | 100.48.0.0/12 |
| Route mapping | Found |
| RPKI Status | Valid |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-17 17:11:54 UTC |
| Last Seen | 2026-11-02 11:46:11 UTC |
| Profile Built | 2026-11-02 11:59:41 UTC |
| Data Freshness | Live |
| Signal Types | 28 |
| Total Observations | 39 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 100.61.225.20
Who owns the IP address 100.61.225.20?
100.61.225.20 is registered to Amazon Data Services Northern Virginia. The address falls within the 100.48.0.0/12 network block. Registration is held at ARIN.
Where is 100.61.225.20 located?
Geolocation data places 100.61.225.20 in Ashburn, VA, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 100.61.225.20 malicious or safe?
100.61.225.20 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 100.61.225.20?
The reverse DNS (PTR) record for 100.61.225.20 is ec2-100-61-225-20.compute-1.amazonaws.com. This hostname is forward-confirmed, meaning it resolves back to the same address.
What ports are open on 100.61.225.20?
Responsive ports observed on 100.61.225.20 include 80, 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.
Is 100.61.225.20 a VPN, proxy, or data center address?
100.61.225.20 is classified as cloud infrastructure based on network ownership and behavioural analysis.