108.131.106.20
# INTELLIGENCE BRIEFING: IP 108.131.106.20/32
## Executive Summary
IP address 108.131.106.20 is a legitimate Amazon Web Services (AWS) cloud infrastructure endpoint located in Dublin, Ireland. The IP presents low risk with a score of 25/100 and no active threat indicators. No immediate action required; standard monitoring recommended.
---
## Ownership & Registration
| Field | Value |
|---|---|
| **Organization** | Amazon Data Services Ireland Limited |
| **ASN** | 16509 |
| **NetName** | AMAZON-DUB |
| **CIDR Block** | 108.128.0.0/13 |
| **RIR** | ARIN |
| **Abuse Contact** | Available via RDAP |
---
## Geolocation
| Field | Value |
|---|---|
| **Country** | Ireland (IE) |
| **Region** | Leinster |
| **City** | Dublin |
| **Geo Confidence** | Plausible (1 source) |
| **Distance from Probe** | 867.9 km |
---
## Network Classification
| Classification | Value |
|---|---|
| **Infrastructure Type** | Cloud Compute |
| **Provider** | Amazon Web Services |
| **Cloud Platform** | AWS EC2 |
| **Hosting** | Yes |
| **CDN** | No |
| **VPN/Proxy** | No |
| **Tor Exit Node** | No |
| **Mobile/Residential** | No |
---
## DNS Resolution
| Field | Value |
|---|---|
| **PTR Hostname** | ec2-108-131-106-20.eu-west-1.compute.amazonaws.com |
| **Forward Resolution** | Confirmed |
| **Domain** | amazonaws.com |
| **Forward Hostname** | ec2-108-131-106-20.eu-west-1.compute.amazonaws.com |
---
## Threat Assessment
| Indicator | Status |
|---|---|
| **Risk Score** | 25 (Low Risk) |
| **Abuse Confidence** | Not applicable |
| **Blacklist Count** | 0 |
| **Known Campaigns** | None |
| **Spam Source** | No |
| **Known Attacker** | No |
| **Tor Exit Node** | No |
DNSBL Status: Listed on 1 of 8 threat feeds (routine cloud infrastructure listing)
---
## Neighborhood Analysis
- Subnet: 108.131.106.20/24
- Abuse Density: 0 (clean)
- Sibling IPs: 1 total, 0 active, 0 threats
- Classification: Clean
---
## Service Discovery
- Open Ports: None detected
- HTTP Title: None
- TLS Certificate: None
- Server Banner: None
- Connection Type: Firewalled / No Services
---
## Relationship Graph
| Type | Target |
|---|---|
| DNS Association | ec2-108-131-106-20.eu-west-1.compute.amazonaws.com |
| Same Network | AMAZON-DUB |
---
## Observation History
Recent observations (2026-07-31):
- Port Scans: Multiple ports probed; no services detected
- DNS Records: Consistent AWS EC2 hostname resolution
- Ownership: Stable (Amazon Data Services Ireland Limited)
- Geolocation: Dublin, Ireland (consistent)
- Threat Persistence: None (0 days)
- Campaign Likelihood: None
---
## Recommended Actions
Risk Score: 25 (Low)
| Recommendation | Priority |
|---|---|
| **No specific firewall rules required** | — |
| **Monitor for service changes** | Low |
| **Standard cloud traffic monitoring** | Routine |
Note: IP represents legitimate AWS infrastructure. No blocking recommended unless specific malicious activity is observed.
---
## Control Plane Data
- Origin ASN: 16509
- BGP Prefix: 108.128.0.0/13
- Route Stability: Unstable (route changes detected in 30 days)
- RPKI State: Not validated
- DNSSEC: Valid
---
## SOC Analyst Notes
This IP belongs to Amazon's Dublin cloud infrastructure and represents standard AWS EC2 hosting. The low risk score and clean neighborhood profile indicate legitimate infrastructure. No evidence of malicious activity, command-and-control, or data exfiltration patterns. Monitor for any behavioral changes, but no immediate threat response actions warranted.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 108.128.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-108-131-106-20.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-108-131-106-20.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-30 11:02:53 UTC |
| Last Seen | 2026-08-13 00:32:56 UTC |
| Profile Built | 2026-08-13 00:39:12 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 24 |
Full dossier details are available via our API.