IP Intelligence Briefing: 15.181.49.66
*Generated via IPDebrief Analysis*
---
**1. Core Profile**
- Risk Score: 25 (Low Risk)
- Ownership: Amazon Data Services (ASN 16509, "AMAZON-IAD")
- Geolocation: Ashburn, VA, US (39.04°N, -77.49°E)
- Network Role: AWS CloudCompute instance (Hosting, Infrastructure)
- Services:
- HTTPS-alt on port 8443
- TLS certificate issued by Sectigo, valid for "production-c5d-2xlarge-aws-msp-us-1da48eee.gen-vpn.com"
- No open HTTP/FTP/SFTP ports
---
**2. Threat Indicators**
- Malicious Activity: None detected (no abuse confidence, no blacklisted IPs, no campaigns)
- DNS:
- PTR hostname: `ec2-15-181-49-66.compute-1.amazonaws.com`
- SPF/DKIM/DMArc records present (no email-related threats)
- TLS:
- Valid certificate with no self-signed flags
- TLS 1.3 protocol, AES-128-GCM cipher suite
---
**3. Network Context**
- Subnet: 15.181.49.66/24
- Neighbor Risk:
- 2 sibling IPs in subnet (both low risk, 25/60 authority score)
- Subnet abuse density: 0% (clean)
- BGP:
- Origin ASN 16509 (AWS), route stable (no recent changes)
- DNSSEC valid, no CAA records
---
**4. Temporal Observations (Last 30 Days)**
- First Seen: 2026-06-11
- Observations:
- TLS scans (1)
- Geolocation inference (2)
- Operator score: 0.26 (Basic)
- No persistent malicious activity
---
**5. Relationships**
- Linked Entities:
- Amazon AWS network ("AMAZON-IAD")
- DNS hostname: `ec2-15-181-49-66.compute-1.amazonaws.com`
- Certificate subject: "Gen Digital Inc." (Arizona, US)
---
**6. Recommendations**
- Monitoring: Track TLS certificate validity and network traffic anomalies.
- Access Control: Ensure AWS IAM policies restrict access to this instance.
- Subnet Review: Monitor neighboring IPs (e.g., 15.181.49.8, 15.181.49.67) for shared risks.
---
Conclusion: 15.181.49.66 is a legitimate AWS CloudCompute instance with no current threat indicators. It is part of a clean subnet with no abuse history. Continue standard cloud security practices and monitor for unexpected behavior.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS16509 |
| Network Name | AMAZON-IAD |
| CIDR Block | 15.181.48.0/20 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-15-181-49-66.compute-1.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-15-181-49-66.compute-1.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 1/2 domains |
| DMARC | 1/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 8443 | https-alt | tcp | β |
| Closed Ports | 22, 25, 80, 443, 3389, 8080 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | production-c5d-2xlarge-aws-msp-us-1da48eee.gen-vpn.com |
| Valid From | 2026-05-22T00:00:00+00:00 |
| Valid Until | 2026-12-06T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 18EAB242F8B6C256AE4EEF20F3A30423 |
| Thumbprint | 035F6E163551BC3D48A481DD2C9640CCDC9AA3FC |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 15% | 2 | 2 |
| Overall | 20% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-30 00:19:30 UTC |
| Last Seen | 2026-06-29 06:53:51 UTC |
| Profile Built | 2026-06-29 07:20:31 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.