IOC Radar
IPMediumSignal 0/100

76.223.91.20

Location
United StatesUnited States
Seattle, Washington
ASN
AS16509
AWS Global Accelerator (GLOBAL)
First Seen
Aug 7, 2025
Last Seen
Jan 28, 2026
Aug 7
First Seen
320d ago
Jan 28
Last Seen
145d ago
3
Reports
source reports
0%
Confidence
medium
Found in 3 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
0%
Signal Score
0 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryUSUnited States
RegionSeattle, Washington
ASNAS16509
OrganizationAWS Global Accelerator (GLOBAL)

Feed Intelligence Summary

3 reports0% confidence
3
Source reports
0%
Confidence score
Category tags
indicatornetworkresearched

Activity Timeline

1 total obs
Jan 28Jan 28

Threat Activity Heatmap

· Peak: 2026-01-28
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

This Indicator of Compromise (IOC) identifies the IPv4 address `76.223.91.20`. This particular IP address has been explicitly whitelisted by multiple trusted services, unequivocally marking it as a benign entity. With a threat score of 0.0, this IOC carries no associated risk of malicious activity, and its presence in threat intelligence feeds primarily serves to confirm its benign status. Consequently, its detection does not imply compromise or pose an immediate threat to the organization's sec…

Threat ScoreLow Risk
0
SIGNAL
Signal Score
0%
Confidence
3
Reports
First seenAug 7, 2025
Last seenJan 28, 2026
GeolocationUS
CountryUnited States
LocationSeattle, Washington
ASNAS16509
OrgAWS Global Accelerator (GLOBAL)
Coords47.6043, -122.3298

VirusTotal

Not checked

WHOIS

raw
NetRange: 76.223.0.0 - 76.223.175.255 CIDR: 76.223.0.0/17, 76.223.128.0/19, 76.223.160.0/20 NetName: AMAZO-4 NetHandle: NET-76-223-0-0-1 Parent: NET76 (NET-76-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Amazon.com, Inc. (AMAZO-4) RegDate: 2018-01-10 Updated: 2018-03-07 Ref: https://rdap.arin.net/registry/ip/76.223.0.0 OrgName: Amazon.com, Inc. OrgId: AMAZO-4 Address: Amazon Web Services, Inc. Address: P.O. Box 81226 City: Seattle StateProv: WA PostalCode: 98108-1226 Country: US RegDate: 2005-09-29 Updated: 2022-09-30 Comment: For details of this service please see Comment: http://ec2.amazonaws.com Ref: https://rdap.arin.net/registry/entity/AMAZO-4 OrgNOCHandle: AANO1-ARIN OrgNOCName: Amazon AWS Network Operations OrgNOCPhone: +1-206-555-0000 OrgNOCEmail: [email protected] OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN OrgTechHandle: ANO24-ARIN OrgTechName: Amazon EC2 Network Operations OrgTechPhone: +1-206-555-0000 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN OrgRoutingHandle: IPROU3-ARIN OrgRoutingName: IP Routing OrgRoutingPhone: +1-206-555-0000 OrgRoutingEmail: [email protected] OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN OrgRoutingHandle: ARMP-ARIN OrgRoutingName: AWS RPKI Management POC OrgRoutingPhone: +1-206-555-0000 OrgRoutingEmail: [email protected] OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN OrgAbuseHandle: AEA8-ARIN OrgAbuseName: Amazon EC2 Abuse OrgAbusePhone: +1-206-555-0000 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 10 months ago · Last seen 4 months ago
Appeared in 3 threat reports