# 32.199.96.17 — IP Intelligence Summary

32.199.96.17 is an IPv4 address operated by Amazon.com, Inc. (AS14618), geolocated to Ashburn, United States. Its reverse DNS name is ec2-32-199-96-17.compute-1.amazonaws.com. As of October 26, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/32.199.96.17
- Last updated: 2026-10-26

## Ownership

- Organization: Amazon.com, Inc.
- Network name: AMAZO-4
- Allocated block: 32.184.0.0/13
- ASN: AS14618 (https://ipdebrief.com/asn/14618)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Ashburn
- Region: VA
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: Unknown
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ec2-32-199-96-17.compute-1.amazonaws.com
- Forward-confirmed: yes

## Exposed services

- 443/tcp — https

## Analyst narrative

IP 32.199.96.17 was identified as an Amazon Web Services (AWS) instance (AS14618, AMAZO-4) located in Ashburn, Virginia. The asset holds a High Risk reputation with a risk score of 70. While the neighborhood classification remained clean with zero blacklist hits, the intelligence profile flagged a high-likelihood campaign association correlated with 44 other IPs. The host resolved to ec2-32-199-96-17.compute-1.amazonaws.com and presented a TLS certificate for *.reddit.com on TCP/443. The automated assessment recommended a Block action with Critical severity, citing the high risk score and strong threat evidence.

## Addresses sharing infrastructure

- 3.93.255.189 — Same TLS certificate (https://ipdebrief.com/3.93.255.189)
- 3.209.131.203 — Same TLS certificate (https://ipdebrief.com/3.209.131.203)
- 3.212.163.44 — Same TLS certificate (https://ipdebrief.com/3.212.163.44)
- 3.223.152.116 — Same TLS certificate (https://ipdebrief.com/3.223.152.116)
- 3.232.182.137 — Same TLS certificate (https://ipdebrief.com/3.232.182.137)
- 18.233.68.136 — Same TLS certificate (https://ipdebrief.com/18.233.68.136)
- 32.194.54.125 — Same TLS certificate (https://ipdebrief.com/32.194.54.125)
- 34.194.229.149 — Same TLS certificate (https://ipdebrief.com/34.194.229.149)
- 34.231.188.97 — Same TLS certificate (https://ipdebrief.com/34.231.188.97)
- 35.170.253.92 — Same TLS certificate (https://ipdebrief.com/35.170.253.92)
- 52.1.239.24 — Same TLS certificate (https://ipdebrief.com/52.1.239.24)
- 52.87.150.86 — Same TLS certificate (https://ipdebrief.com/52.87.150.86)

---

Source: IPDebrief, "32.199.96.17 IP intelligence", https://ipdebrief.com/32.199.96.17, updated 2026-10-26. Assessments are probabilistic.