IPDebrief

108.166.228.85

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP 108.166.228.85/32 was identified as belonging to Amazon.com, Inc. (ASN 16509, AMAZO-4) within the 108.166.224.0/19 block. Geolocation data placed the address in Boardman, Oregon, United States. The overall risk score was recorded at 25, with a reputation status of Low Risk. Network analysis confirmed the host was firewalled with no open ports or active services detected. Behavioral metrics indicated zero honeypot hits, enumeration strikes, or WAF violations, and the IP was not marked as a known attacker.

The surrounding /24 neighborhood (108.166.228.85/24) was classified as mostly clean with an abuse density of 0.16. Although the threat actor section tagged the address as Suspicious Host, no specific campaigns or blacklist entries were associated with the IP. The observation window spanned from 2026-09-05 to 2026-09-17. The recommended action for the SOC analyst was to Monitor the address with low severity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionOregon
CityBoardman
Timezoneβ€”
Latitude45.84
Longitude-119.70

🏒 Ownership & Registration

OrganizationAmazon.com, Inc.
ASNAS16509
Network NameAMAZO-4
CIDR Block108.166.224.0/19
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)

πŸ” DNS Hygiene

Hygiene Score0% (None)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECNot signed
CAANot configured

☁️ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierHosting β€” Infrastructure provider without advanced routing
No specific classification

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
35%
23
routing
13%
11
services
19%
22
ownership
27%
23
reputation
28%
13
geolocation
19%
22
Overall23%1014
Coverage: 5/6 dimensions Β· Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-09-05 12:04:14 UTC
Last Seen2026-09-17 05:31:10 UTC
Profile Built2026-09-17 05:45:58 UTC
Data FreshnessLive
Signal Types18
Total Observations25
πŸ” 18 signal types Β· 25 observations collected
This report is generated from 18+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.