IPDebrief

15.197.209.20

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

The IP address 15.197.209.20 was associated with Amazon Technologies Inc. (ASN 16509) within the Amazon Web Services infrastructure, operating under the CIDR block 15.196.0.0/14. Forward and reverse DNS resolution confirmed the hostname `ab4fe970e82bcd5e7.awsglobalaccelerator.com`, and SPF and DMARC records were present.

The address maintained a Low Risk reputation with a risk score of 25. No open ports were observed, and the service purpose was classified as Firewalled. While the address was not flagged as a known attacker or spam source, it appeared on one of eight monitored DNS blacklists during the observation window from 2026-09-01 to 2026-09-05.

Validation discrepancies were identified between the reported US geolocation and Round-Trip Time (RTT) physics measurements, which indicated a distance of 7625km versus an observed RTT of 15ms. The subnet 15.197.209.20/24 remained classified as clean with zero abuse density. Behavioral analysis recorded no honeypot hits, enumeration strikes, or WAF violations. Due to signal contradictions and low data suff

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
Regionβ€”
Cityβ€”
Timezoneβ€”
Latitudeβ€”
Longitudeβ€”

🏒 Ownership & Registration

OrganizationAmazon Technologies Inc.
ASNAS16509
Network NameAT-88-Z
CIDR Block15.196.0.0/14
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRab4fe970e82bcd5e7.awsglobalaccelerator.com
Forward ConfirmedYes β€” FCrDNS verified
Forward Hostnamesab4fe970e82bcd5e7.awsglobalaccelerator.com

πŸ” DNS Hygiene

Hygiene Score60% (Good)
SPFPresent
DMARCPresent
FCrDNSVerified
DNSSECNot signed
CAANot configured

☁️ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierTier 3 β€” Basic operator with some routing infrastructure
No specific classification

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
38%
25
routing
13%
11
services
19%
22
ownership
27%
23
reputation
22%
13
geolocation
27%
23
Overall24%1017
Coverage: 4/6 dimensions Β· Data sufficiency: partial
Data CoherenceMostly Consistent (80%) β€” 1 contradiction(s)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-09-01 01:14:24 UTC
Last Seen2026-09-20 14:56:19 UTC
Profile Built2026-09-22 21:34:46 UTC
Data FreshnessLive
Signal Types28
Total Observations41
πŸ” 28 signal types Β· 41 observations collected
This report is generated from 28+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.