# 13.249.91.120 — IP Intelligence Summary

13.249.91.120 is an IPv4 address operated by Amazon.com, Inc. (AS16509), geolocated to New York, United States. Its reverse DNS name is server-13-249-91-120.jfk52.r.cloudfront.net. As of October 3, 2026, IPDebrief rates it Low Risk (20/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/13.249.91.120
- Last updated: 2026-10-03

## Ownership

- Organization: Amazon.com, Inc.
- Network name: AMAZO-CF
- Allocated block: 13.249.0.0/16
- ASN: AS16509 (https://ipdebrief.com/asn/16509)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: New York
- Region: US-NY
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: Unknown
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (20/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- server-13-249-91-120.jfk52.r.cloudfront.net
- Forward-confirmed: yes

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

IP address 13.249.91.120/32 was identified as a Low Risk endpoint associated with Amazon.com, Inc. (ASN 16509). The address fell within the AMAZO-CF network block (13.249.0.0/16) and resolved via DNS to \`server-13-249-91-120.jfk52.r.cloudfront.net\`. Service banners indicated a CloudFront server operating on TCP ports 80 and 443.

Geolocation data listed the location as New York, US, though RTT measurements contradicted this physics measurement (7625.7km distance vs 17ms RTT). No known threat campaigns, abuse reports, or blacklistings were recorded. Behavioral analysis showed zero honeypot hits or WAF violations. DNS hygiene scored 80 with SPF and DMARC records present.

The assessment labeled the address as Low Risk with a recommendation to monitor due to signal contradictions, maintaining a low severity rating. No evidence of persistent malicious activity was observed during the evaluation.

## Nearby addresses

- 13.249.91.9 (https://ipdebrief.com/13.249.91.9)
- 13.249.91.12 (https://ipdebrief.com/13.249.91.12)
- 13.249.91.20 (https://ipdebrief.com/13.249.91.20)
- 13.249.91.24 (https://ipdebrief.com/13.249.91.24)
- 13.249.91.27 (https://ipdebrief.com/13.249.91.27)
- 13.249.91.31 (https://ipdebrief.com/13.249.91.31)
- 13.249.91.34 (https://ipdebrief.com/13.249.91.34)
- 13.249.91.37 (https://ipdebrief.com/13.249.91.37)
- 13.249.91.38 (https://ipdebrief.com/13.249.91.38)
- 13.249.91.41 (https://ipdebrief.com/13.249.91.41)
- 13.249.91.51 (https://ipdebrief.com/13.249.91.51)
- 13.249.91.57 (https://ipdebrief.com/13.249.91.57)

---

Source: IPDebrief, "13.249.91.120 IP intelligence", https://ipdebrief.com/13.249.91.120, updated 2026-10-03. Assessments are probabilistic.