IPDebrief

23.21.120.50

IP Intelligence Dossier
Your IP: 216.73.216.142

23.21.120.50 is an IPv4 address operated by Amazon Data Services Northern Virginia (AS14618), geolocated to Ashburn, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name ec2-23-21-120-50.compute-1.amazonaws.com. As of November 3, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

{ } JSON
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP 23.21.120.50/32 was identified as a High Risk asset (Score: 70) located in Ashburn, Virginia, within the Amazon Data Services Northern Virginia network (ASN 14618). The address resolved to `ec2-23-21-120-50.compute-1.amazonaws.com` and presented a TLS certificate subject `public1.adgear.com` over TCP port 443. Control plane analysis indicated route instability due to an IRR inconsistency despite valid RPKI state. Behavioral analysis assigned a high campaign correlation likelihood. The profile recommendation classified the severity as Critical and advised blocking the address based on high risk scores and strong threat evidence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇺🇸 United States
RegionVA
CityAshburn
TimezoneAmerica/New_York
Latitude39.04
Longitude-77.49

🏢 Ownership & Registration

OrganizationAmazon Data Services Northern Virginia
ASNAS14618
Network NameAMAZON-IAD
CIDR Block23.20.0.0/14
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRec2-23-21-120-50.compute-1.amazonaws.com
Forward ConfirmedYes — FCrDNS verified
Forward Hostnamesec2-23-21-120-50.compute-1.amazonaws.com

🔐 DNS Hygiene

Hygiene Score60% (Good)
SPF5/7 domains
DMARC1/7 domains
FCrDNSVerified
DNSSECNot signed
CAANot configured
Domains Checked7 domains

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierTier 3 — Basic operator with some routing infrastructure
CloudHosting

🔌 Services & Open Ports

PortServiceProtocolBanner
443httpstcp—
Closed Ports22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned)
ServerWeb server detected
HTTP Title—

🔐 TLS Certificate

🔒
CN=public1.adgear.com
Issued by CN=Sectigo Public Server Authentication CA DV R36, O=Sectigo Limited, C=GB
Self-signed: No
SANspublic1.adgear.com*.adgear.com*.adgrx.com*.admin.adgear.com*.dsp.samsungads.com*.email-samsung.com*.pre-prod.dsp.samsungads.com*.pre-prod.trader.adgear.com*.samsungacr.com*.samsungads.com
Valid From2026-10-05T00:00:00+00:00
Valid Until2027-04-21T23:59:59+00:00
TLS ProtocolTls12
Cipher SuiteTLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Signature Algorithmsha256RSA
Validity Period198 days

🛡️ Public Network Snapshot

Origin ASNAS14618
Network Prefix23.20.0.0/15
Route mappingFound
RPKI StatusValid
HSTSEnabled
CSPEnabled
HTTP/2Enabled

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
33%
24
routing
38%
45
services
27%
23
ownership
30%
34
reputation
13%
12
geolocation
27%
23
Overall28%1421
Coverage: 5/6 dimensions · Data sufficiency: partial
Data CoherenceMixed Signals (67%) — 2 contradiction(s)
AttributionHigh (85%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ RPKI is valid but IRR route object is inconsistent
⚠ High authority score (70) but appears on threat lists (risk 70)

📅 Observation Timeline 🔄 Live

First Seen2026-10-12 14:45:19 UTC
Last Seen2026-11-03 18:41:54 UTC
Profile Built2026-11-03 18:45:17 UTC
Data FreshnessLive
Signal Types30
Total Observations42
🔍 30 signal types · 42 observations collected
This report is generated from 30+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 📧 Enterprise Access

❓ Frequently Asked Questions About 23.21.120.50

Who owns the IP address 23.21.120.50?

23.21.120.50 is registered to Amazon Data Services Northern Virginia. The address falls within the 23.20.0.0/14 network block. Registration is held at ARIN.

Where is 23.21.120.50 located?

Geolocation data places 23.21.120.50 in Ashburn, VA, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 23.21.120.50 malicious or safe?

23.21.120.50 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 23.21.120.50?

The reverse DNS (PTR) record for 23.21.120.50 is ec2-23-21-120-50.compute-1.amazonaws.com. This hostname is forward-confirmed, meaning it resolves back to the same address.

What ports are open on 23.21.120.50?

Responsive ports observed on 23.21.120.50 include 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.

Is 23.21.120.50 a VPN, proxy, or data center address?

23.21.120.50 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.

🏘️ Related IP Addresses

Addresses sharing infrastructure

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.