IPDebrief

18.236.7.105

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP INTELLIGENCE BRIEFING: 18.236.7.105/32

Classification: LOW RISK - Authorized AWS Infrastructure

Date: 2026-06-21

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

IP address 18.236.7.105 is identified as a legitimate Amazon Web Services (AWS) cloud infrastructure endpoint. The IP demonstrates a low risk profile (Risk Score: 25/100) with no active threat indicators or malicious activity observed. The address resolves to an EC2 instance in the US West-2 (Oregon) region and is properly registered within Amazon's CIDR block 18.236.0.0/15.

Recommendation: No blocking required. Standard network monitoring applies.

---

## INFRASTRUCTURE PROFILE

AttributeValue
**IP Address**18.236.7.105/32
**Organization**Amazon.com, Inc.
**Network Name**AMAZO-ZPDX
**ASN**16509
**Location**Portland, OR, United States
**Region**us-west-2
**Infrastructure Type**Cloud Compute (AWS EC2)
**Risk Score**25 (Low Risk)
**Reputation**Low Risk

---

## NETWORK CLASSIFICATION

The IP is properly classified as cloud infrastructure with no publicly exposed services, indicating appropriate security hardening.

---

## DNS RESOLUTION

Record TypeValue
**PTR Hostname**ec2-18-236-7-105.us-west-2.compute.amazonaws.com
**Forward Resolution**Confirmed
**Forward Hostnames**ec2-18-236-7-105.us-west-2.compute.amazonaws.com
**Email SPF**Present
**Email DMARC**Present

DNS records are valid and consistent with AWS infrastructure naming conventions.

---

## THREAT ASSESSMENT

Current Threat Status: CLEAN

IndicatorStatus
**Threat Indicators**None
**Abuse Confidence Score**N/A
**Blacklist Count**0
**Known Campaigns**None
**Is Known Attacker**No
**Is Spam Source**No
**DNSBL Listed**1 of 8 lists

No threat indicators, malicious activity, or campaign associations detected.

---

## TEMPORAL ANALYSIS

Observation History: 23 observations tracked

The IP has maintained consistent cloud infrastructure classification across all observation windows with no degradation in reputation.

---

## SUBNET NEIGHBORHOOD ANALYSIS

Subnet: 18.236.7.105/24

The /24 subnet shows minimal threat presence, consistent with legitimate AWS infrastructure usage.

---

## NETWORK RELATIONSHIPS

All relationship data confirms:

Consistent AWS infrastructure with no anomalous external associations.

---

## SECURITY ACTIONS

Recommended Actions: None

The IP address presents no security threat and does not require firewall rules or blocking. Standard network monitoring protocols are sufficient.

---

## ANALYST NOTES

This IP address represents legitimate AWS cloud infrastructure with no indicators of compromise or malicious activity. The low risk score (25/100), clean threat profile, and consistent infrastructure classification across multiple observation periods support classification as trusted infrastructure. No defensive actions are required beyond standard network monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionOR
CityPortland
TimezoneAmerica/Los_Angeles
Latitude45.59
Longitude-122.60

🏒 Ownership & Registration

OrganizationAmazon.com, Inc.
ASNAS16509
Network NameAMAZO-ZPDX
CIDR Block18.236.0.0/15
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRec2-18-236-7-105.us-west-2.compute.amazonaws.com
Forward ConfirmedYes β€” FCrDNS verified
Forward Hostnamesec2-18-236-7-105.us-west-2.compute.amazonaws.com

πŸ” DNS Hygiene

Hygiene Score80% (Excellent)
SPFPresent
DMARCPresent
FCrDNSVerified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierTier 3 β€” Basic operator with some routing infrastructure
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
27%
24
routing
13%
11
services
19%
22
ownership
27%
23
reputation
22%
13
geolocation
31%
23
Overall23%1016
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-05-30 00:19:44 UTC
Last Seen2026-06-29 06:58:13 UTC
Profile Built2026-06-29 07:00:59 UTC
Data FreshnessLive
Signal Types24
Total Observations24
πŸ” 24 signal types Β· 24 observations collected
This report is generated from 24+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.