32.196.110.27
IP Intelligence Briefing: 32.196.110.27
Date: 2026-06-17
**Profile Summary**
- Risk Score: Moderate (50/100)
- Geolocation: Ashburn, VA, United States (39.05°N, -77.49°E)
- Network Role: Amazon Web Services (AWS) EC2 instance (firewalled, no open services)
- Ownership: Unattributed (no ASN/org data)
- Threat Indicators: None detected (no malware, spam, or attack signatures)
**Key Observations**
1. Infrastructure Context:
- Linked to AWS infrastructure (`ec2-32-196-110-27.compute-1.amazonaws.com`).
- BGP prefix: `32.196.0.0/14` (AWS-owned).
- DNSSEC validated, no DNS tampering detected.
2. Temporal Activity:
- 12 observations over 30 days: DNS records, BGP data, and network metadata.
- No persistent malicious activity or ownership changes.
3. Relationships:
- Single DNS association with AWS-hosted hostname.
- No connections to other IPs, domains, or certificates.
4. Neighborhood Analysis:
- Subnet (`32.196.110.27/24`) has 0 abuse density.
- No neighboring IPs reported.
**Threat Assessment**
- Risk Factors: Public IP associated with AWS, moderate risk score.
- Mitigation: Monitor for unexpected service changes or unauthorized access.
- Recommendation: No immediate action required; focus on AWS account security practices.
Conclusion: This IP is a legitimate AWS EC2 instance with no malicious indicators. Moderate risk is likely due to public exposure, but no active threats were detected. SOC teams should ensure AWS security best practices are enforced.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS14618 |
| Network Name | AMAZO-4 |
| CIDR Block | 32.184.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-32-196-110-27.compute-1.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-32-196-110-27.compute-1.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 17% | 1 | 1 |
| ownership | 35% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 24% | 2 | 2 |
| Overall | 26% | 9 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-17 00:42:07 UTC |
| Last Seen | 2026-06-22 01:00:53 UTC |
| Profile Built | 2026-06-22 01:03:29 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.