IPDebrief

18.97.36.72

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

Intelligence Briefing: 18.97.36.72/32

Overview

The IP address 18.97.36.72 was classified as low risk with a risk score of zero. The infrastructure operated as a web server under the Amazon Web Services cloud provider.

Ownership and Geolocation

Records attributed the address to Amazon Technologies Inc. (ASN 14618, AT-88-Z) within the ARIN registry, CIDR block 18.32.0.0/11. Geolocation data placed the resource in Ashburn, Virginia, USA.

Threat Assessment

The profile contained no threat indicators. The address was not flagged as a Tor exit node, known attacker, or spam source, and blacklist counts remained at zero.

Technical Observations

Port 443 (HTTPS) was identified as open. TLS certificate data linked the certificate to the subject CN "nexus-websocket-a.intercom.io," issued by Amazon RSA 2048 M04. Reverse DNS resolution returned "ec2-18-97-36-72.compute-1.amazonaws.com" with forward confirmation enabled. Associated email authentication records for amazonaws.com included SPF and DMARC configurations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇺🇸 United States
RegionVA
CityAshburn
TimezoneAmerica/New_York
Latitude39.04
Longitude-77.49

🏢 Ownership & Registration

OrganizationAmazon Technologies Inc.
ASNAS14618
Network NameAT-88-Z
CIDR Block18.32.0.0/11
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRec2-18-97-36-72.compute-1.amazonaws.com
Forward ConfirmedYes — FCrDNS verified
Forward Hostnamesec2-18-97-36-72.compute-1.amazonaws.com

🔐 DNS Hygiene

Hygiene Score60% (Good)
SPF3/3 domains
DMARC3/3 domains
FCrDNSVerified
DNSSECNot signed
CAANot configured
Domains Checked3 domains

☁️ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierHosting — Infrastructure provider without advanced routing
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
443httpstcp—
Closed Ports22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned)
Servernginx
HTTP Title—

🔐 TLS Certificate

🔒
CN=nexus-websocket-a.intercom.io
Issued by CN=Amazon RSA 2048 M04, O=Amazon, C=US
Self-signed: No
SANsnexus-websocket-a.intercom.ionexus-websocket-pst.intercom.ionexus-websocket-overflow.intercom.ionexus-websocket-inbox.intercom.io
Valid From2026-08-09T00:00:00+00:00
Valid Until2027-02-22T23:59:59+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period197 days
Serial Number049CE817637CC8945B65063C530B254E
Thumbprint96B4E9457BE66F873B2286AFED177202BF751000

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
43%
25
routing
13%
11
services
27%
23
ownership
27%
23
reputation
28%
13
geolocation
33%
24
Overall28%1019
Coverage: 4/6 dimensions · Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-09-04 00:49:20 UTC
Last Seen2026-09-23 18:53:43 UTC
Profile Built2026-09-23 18:57:40 UTC
Data FreshnessLive
Signal Types25
Total Observations36
🔍 25 signal types · 36 observations collected
This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.