IPDebrief

98.82.161.50

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

Security analysts profiled IP 98.82.161.50 as an Amazon Web Services EC2 instance located in Ashburn, Virginia, associated with ASN 14618 (Amazon Data Services Northern Virginia). The address resolved to a standard web server configuration on ports 80 and 443, utilizing a TLS certificate issued by Amazon RSA 2048 M04. The infrastructure maintained a Moderate Risk reputation score of 60. Despite behavioral analysis recording zero total incidents and no enumeration strikes, the system classified the host as a Blacklisted Host following inclusion on three DNS blocklists. The assessment recommended blocking the IP with high severity due to elevated risk from multiple threat signals. Technical validation revealed a contradiction between valid RPKI status and inconsistent IRR route objects. Given the current threat posture, firewall egress and ingress rules were advised to mitigate potential risk.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionVA
CityAshburn
TimezoneAmerica/New_York
Latitude39.04
Longitude-77.49

🏒 Ownership & Registration

OrganizationAmazon Data Services Northern Virginia
ASNAS14618
Network NameAMAZON-IAD
CIDR Block98.80.0.0/13
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRec2-98-82-161-50.compute-1.amazonaws.com
Forward ConfirmedYes β€” FCrDNS verified
Forward Hostnamesec2-98-82-161-50.compute-1.amazonaws.com

πŸ” DNS Hygiene

Hygiene Score60% (Good)
SPF4/4 domains
DMARC4/4 domains
FCrDNSVerified
DNSSECNot signed
CAANot configured
Domains Checked4 domains

☁️ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierTier 3 β€” Basic operator with some routing infrastructure
No specific classification

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
443httpstcpβ€”
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
ServerServer
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
CN=msh.amazon.com
Issued by CN=Amazon RSA 2048 M04, O=Amazon, C=US
Self-signed: No
SANsmsh.amazon.com
Valid From2026-08-10T00:00:00+00:00
Valid Until2027-02-23T23:59:59+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period197 days
Serial Number0FC510C83895E58A075CE9F1047D6B0B
Thumbprint1B705B90E5E97F23738DA50DB70498FF774D1274

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
43%
25
routing
38%
45
services
33%
24
ownership
30%
34
reputation
13%
12
geolocation
38%
25
Overall32%1425
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceMostly Consistent (82%) β€” 1 contradiction(s)
AttributionHigh (85%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ RPKI is valid but IRR route object is inconsistent

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-09-01 20:07:01 UTC
Last Seen2026-09-25 04:56:33 UTC
Profile Built2026-09-25 05:06:00 UTC
Data FreshnessLive
Signal Types30
Total Observations45
πŸ” 30 signal types Β· 45 observations collected
This report is generated from 30+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.