# 23.21.120.50 — IP Intelligence Summary

23.21.120.50 is an IPv4 address operated by Amazon Data Services Northern Virginia (AS14618), geolocated to Ashburn, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name ec2-23-21-120-50.compute-1.amazonaws.com. As of November 3, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/23.21.120.50
- Last updated: 2026-11-03

## Ownership

- Organization: Amazon Data Services Northern Virginia
- Network name: AMAZON-IAD
- Allocated block: 23.20.0.0/14
- ASN: AS14618 (https://ipdebrief.com/asn/14618)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Ashburn
- Region: VA
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ec2-23-21-120-50.compute-1.amazonaws.com
- Forward-confirmed: yes

## Exposed services

- 443/tcp — https

## Analyst narrative

IP 23.21.120.50/32 was identified as a High Risk asset (Score: 70) located in Ashburn, Virginia, within the Amazon Data Services Northern Virginia network (ASN 14618). The address resolved to \`ec2-23-21-120-50.compute-1.amazonaws.com\` and presented a TLS certificate subject \`public1.adgear.com\` over TCP port 443. Control plane analysis indicated route instability due to an IRR inconsistency despite valid RPKI state. Behavioral analysis assigned a high campaign correlation likelihood. The profile recommendation classified the severity as Critical and advised blocking the address based on high risk scores and strong threat evidence.

## Addresses sharing infrastructure

- 3.208.111.72 — Same TLS certificate (https://ipdebrief.com/3.208.111.72)
- 3.211.78.176 — Same TLS certificate (https://ipdebrief.com/3.211.78.176)
- 3.216.76.216 — Same TLS certificate (https://ipdebrief.com/3.216.76.216)
- 3.220.53.11 — Same TLS certificate (https://ipdebrief.com/3.220.53.11)
- 3.234.108.206 — Same TLS certificate (https://ipdebrief.com/3.234.108.206)
- 13.219.133.140 — Same TLS certificate (https://ipdebrief.com/13.219.133.140)
- 18.206.30.223 — Same TLS certificate (https://ipdebrief.com/18.206.30.223)
- 18.209.156.154 — Same TLS certificate (https://ipdebrief.com/18.209.156.154)
- 34.195.180.225 — Same TLS certificate (https://ipdebrief.com/34.195.180.225)
- 34.200.18.249 — Same TLS certificate (https://ipdebrief.com/34.200.18.249)
- 34.205.182.206 — Same TLS certificate (https://ipdebrief.com/34.205.182.206)
- 34.224.233.37 — Same TLS certificate (https://ipdebrief.com/34.224.233.37)

---

Source: IPDebrief, "23.21.120.50 IP intelligence", https://ipdebrief.com/23.21.120.50, updated 2026-11-03. Assessments are probabilistic.
