IP INTELLIGENCE BRIEFING: 108.131.84.130/32
Classification: LEGITIMATE CLOUD INFRASTRUCTURE
Risk Assessment: LOW RISK (Score: 25/100)
Date of Analysis: Current
Executive Summary
The IP address 108.131.84.130 was analyzed as part of Amazon Web Services cloud infrastructure deployed in Dublin, Ireland. The address demonstrates no malicious indicators, with a clean reputation profile and zero threat observations. The IP resolves to EC2 instance hostname ec2-108-131-84-130.eu-west-1.compute.amazonaws.com and operates within AWS's AMAZON-DUB network block (108.128.0.0/13, ASN 16509).
Ownership and Infrastructure Profile
The IP is owned by Amazon Data Services Ireland Limited and operates under ASN 16509 (Amazon.com Inc.). The address is part of the AMAZON-DUB network block, classified as cloud compute infrastructure. Geolocation data indicates deployment in Dublin, Ireland (country code IE, Leinster region). The network is classified as a hosted cloud environment with firewalled/no services detected.
Threat Intelligence Findings
No threat indicators were detected during analysis:
- Blacklist entries: 0
- Known attacker flag: False
- Spam source flag: False
- Tor exit node: False
- Known campaigns: None
- Threat persistence days: 0
The IP maintained a stable reputation profile with no evidence of malicious activity.
Network and Subnet Analysis
The IP resides in subnet 108.131.84.130/24, which demonstrated zero abuse density and was classified as clean. No active or threat siblings were identified within the neighborhood. The subnet shows:
- High risk neighbors: 0
- Medium risk neighbors: 0
- Low risk neighbors: 0
- Overall abuse density: 0%
Observation History
Eighteen signal observations were collected over the analysis period. Key findings include:
- ASN 16509 assignment stable for 9,583 days
- One BGP route change recorded in the previous 30 days
- No threat observation count: 0
- No persistent malicious activity detected
- Ownership changes: 0
- Route stability: The origin ASN maintains consistent routing through AS2497
DNS and Service Analysis
Reverse DNS resolves to ec2-108-131-84-130.eu-west-1.compute.amazonaws.com with forward confirmation verified. No open ports were detected during service scanning. DNSSEC validation is enabled, and RPKI state is consistent.
Relationship Graph
Seven relationships were identified:
- Multiple same-network associations to AMAZON-DUB
- DNS associations to the EC2 instance hostname
- No external organization or certificate associations
Recommended Actions
No security actions or firewall rules were generated due to the low-risk profile. The IP address is classified as legitimate cloud infrastructure with no indication of compromise or malicious use. SOC analysts may monitor but no blocking or restriction actions are warranted.
Conclusion
IP 108.131.84.130 represents standard AWS cloud infrastructure with no adversarial signals. The address exhibits normal operational characteristics for cloud compute resources in the Dublin region. No immediate threat mitigation actions are required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 108.128.0.0/13 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | ec2-108-131-84-130.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | ec2-108-131-84-130.eu-west-1.compute.amazonaws.com |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 30% | 3 | 4 |
| services | 19% | 2 | 2 |
| ownership | 32% | 3 | 4 |
| reputation | 28% | 1 | 3 |
| geolocation | 13% | 1 | 1 |
| Overall | 25% | 12 | 18 |
| Data Coherence | Consistent (100%) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-29 16:41:00 UTC |
| Last Seen | 2026-08-12 23:38:29 UTC |
| Profile Built | 2026-08-12 23:50:28 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 28 |
Full dossier details are available via our API.