23.20.60.95

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

THREAT INTELLIGENCE BRIEFING

IP Address: 23.20.60.95/32

Report Date: 2026-07-30

Classification: LOW RISK / INFRASTRUCTURE

---

EXECUTIVE SUMMARY

IP 23.20.60.95 is a benign Amazon Web Services (AWS) infrastructure address located in Ashburn, VA. The IP exhibits no malicious activity indicators and is classified as low risk across all threat intelligence feeds.

---

OWNERSHIP & GEOLOCATION

Organization: Amazon Data Services Northern Virginia
ASN: 14618 (AMAZON-IAD)
CIDR Block: 23.20.0.0/14
Location: Ashburn, Virginia, United States (39.04°N, -77.49°W)
Registration: ARIN registry
DNS Resolution: ec2-23-20-60-95.compute-1.amazonaws.com

---

THREAT ASSESSMENT

Metric	Value
Risk Score	0 (Low Risk)
Provider Score	0
Authority Score	0
Abuse Confidence	N/A
Blacklist Count	0
Threat Feeds	None
Known Campaigns	None
Tor Exit Node	No
Known Attacker	No
Spam Source	No

---

NETWORK ROLE & CLASSIFICATION

Infrastructure Type: Cloud Provider (AWS EC2)
Connection Status: Firewalled / No Services Exposed
Open Ports: None detected
TLS Certificate: Not configured
HTTP Title: N/A
CDN/Proxy/VPN: No

---

SUBNET ANALYSIS (23.20.60.0/24)

Abuse Density: 0% (Clean)
Threat Siblings: 0
Active Siblings: 1 (this IP)
Inherited Risk: 0
Subnet Classification: Clean

---

OBSERVATION HISTORY

Total observations: 18 signals captured

Ownership Signals: 4 observations, stable ownership
Geolocation Signals: 3 observations, consistent Ashburn, VA location
Network Signals: 2 observations, clean subnet classification
Banner/Campaign Signals: 1 observation, no campaign activity
Threat Persistence Days: 0
Persistent Malicious Activity: False

No temporal escalation observed. IP has demonstrated consistent benign behavior across all observation periods.

---

RELATIONSHIP GRAPH

DNS Associations: ec2-23-20-60-95.compute-1.amazonaws.com (primary)
Network Associations: AMAZON-IAD
Correlated Entities: 0 external threat indicators
Certificate Matches: 0

---

RECOMMENDED ACTIONS

Firewall Policy: No blocking required

SOC Handling: Monitor as normal AWS traffic

Threat Hunting: No indicators suggest malicious use

Given the zero-risk score, clean subnet classification, and confirmed AWS infrastructure status, this IP represents legitimate cloud infrastructure with no actionable threat indicators.

---

CONFIDENCE LEVEL: High

DATA SOURCES: 18 observation signals, 9 relationship nodes, 0 threat indicators

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	VA
City	Ashburn
Timezone	America/New_York
Latitude	39.04
Longitude	-77.49

🏢 Ownership & Registration

Organization	Amazon Data Services Northern Virginia
ASN	AS14618
Network Name	AMAZON-IAD
CIDR Block	23.20.0.0/14
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR	ec2-23-20-60-95.compute-1.amazonaws.com
Forward Confirmed	Yes — FCrDNS verified
Forward Hostnames	`ec2-23-20-60-95.compute-1.amazonaws.com`

🔐 DNS Hygiene

Hygiene Score	80% (Excellent)
SPF	Present
DMARC	Present
FCrDNS	Verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Firewalled / No Services
Network Tier	Tier 3 — Basic operator with some routing infrastructure

Cloud

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected
Closed Ports	22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	33%	2	4
routing	13%	1	1
services	19%	2	2
ownership	27%	2	3
reputation	30%	1	3
geolocation	27%	2	3
Overall	25%	10	16

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (70%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-07-27 09:39:27 UTC
Last Seen	2026-08-12 21:26:03 UTC
Profile Built	2026-08-12 21:55:32 UTC
Data Freshness	Live
Signal Types	22
Total Observations	30

🔍 22 signal types · 30 observations collected

This report is generated from 22+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

23.20.60.95📋 Copy