# 100.61.225.20 — IP Intelligence Summary

100.61.225.20 is an IPv4 address operated by Amazon Data Services Northern Virginia (AS14618), geolocated to Ashburn, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name ec2-100-61-225-20.compute-1.amazonaws.com. As of November 2, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/100.61.225.20
- Last updated: 2026-11-02

## Ownership

- Organization: Amazon Data Services Northern Virginia
- Network name: AMAZON-IAD
- Allocated block: 100.48.0.0/12
- ASN: AS14618 (https://ipdebrief.com/asn/14618)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Ashburn
- Region: VA
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: —
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ec2-100-61-225-20.compute-1.amazonaws.com
- Forward-confirmed: yes

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

**Intelligence Briefing: 100.61.225.20/32**

**Executive Summary**

The intelligence profile classified 100.61.225.20/32 as High Risk with a score of 70. Attribution identified the asset as Amazon Data Services Northern Virginia (AS14618) within the CIDR block 100.48.0.0/12, geolocated to Ashburn, VA. Network role analysis confirmed the asset as a Web Server hosted on AWS infrastructure.

**Threat Intelligence**

Threat analysis assigned a high likelihood to campaign infrastructure classification, correlating the IP with 25 associated addresses and certificate subjects matching fls-na.amazon.com. While the threat indicators list remained empty and blacklist count was zero, the intelligence platform generated a critical severity recommendation to block the address. Neighborhood analysis reported a clean subnet with zero abuse density among siblings.

**Recommended Actions**

The system recommended blocking traffic from 100.61.225.20/32 at critical severity. Firewall rules were generated for iptables, nginx, and pf environments to drop or deny the source IP.

**Technical Attributes**

\- **Services:** TCP/80 (HTTP), TCP/443 (HTTPS)

\- **Certificate:** CN=fls-na.amazon.com (Amazon RSA 2048 M04)

\- **DNS:** ec2-100-61-225-20.compute-1.amazonaws.com

\- **Confidence:** Overall confidence 20.83%, Data Sufficiency 83.33%

## Addresses sharing infrastructure

- 3.217.126.66 — Same TLS certificate (https://ipdebrief.com/3.217.126.66)
- 3.221.56.145 — Same TLS certificate (https://ipdebrief.com/3.221.56.145)
- 3.223.106.95 — Same TLS certificate (https://ipdebrief.com/3.223.106.95)
- 3.228.234.104 — Same TLS certificate (https://ipdebrief.com/3.228.234.104)
- 3.229.65.20 — Same TLS certificate (https://ipdebrief.com/3.229.65.20)
- 18.213.94.223 — Same TLS certificate (https://ipdebrief.com/18.213.94.223)
- 23.23.195.80 — Same TLS certificate (https://ipdebrief.com/23.23.195.80)
- 32.195.53.184 — Same TLS certificate (https://ipdebrief.com/32.195.53.184)
- 32.196.7.156 — Same TLS certificate (https://ipdebrief.com/32.196.7.156)
- 32.198.216.241 — Same TLS certificate (https://ipdebrief.com/32.198.216.241)
- 34.200.146.45 — Same TLS certificate (https://ipdebrief.com/34.200.146.45)
- 34.224.184.4 — Same TLS certificate (https://ipdebrief.com/34.224.184.4)

---

Source: IPDebrief, "100.61.225.20 IP intelligence", https://ipdebrief.com/100.61.225.20, updated 2026-11-02. Assessments are probabilistic.