18.136.87.141📋 Copy

# IP Intelligence Briefing: 18.136.87.141

## Executive Summary

Classification: Low Risk (Score: 30)

Infrastructure Type: AWS Cloud EC2 Instance

Assessment: Legitimate cloud infrastructure with no malicious indicators. Recommended for standard monitoring.

---

## Infrastructure Profile

Network Role

• Classification: Cloud Infrastructure
• Provider: Amazon Web Services
• DNS Hostname: ec2-18-136-87-141.ap-southeast-1.compute.amazonaws.com
• Reverse DNS: Forward-confirmed resolution to Amazon AWS

---

## Service Footprint

Application Layer

• Web Server: Jetty 12.1.5
• TLS Certificate: Let's Encrypt (Issuer: YE2, O=Let's Encrypt, C=US)
• Certificate Subject: gegaming.co
• Associated Domains: admin.gegaming.co, api.gegaming.co, apps.gegaming.co, bidaflix.gegaming.co, dev-games.gegaming.co

---

## Threat Assessment

Current Risk Indicators

• Overall Risk Score: 30 (Low)
• Abuse Confidence Score: Not applicable
• Blacklist Status: Not listed (0/0 lists)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None

Control Plane Data

• Route Stability: False
• MoAS Status: Not applicable
• DNSSEC: Valid
• DNSBL Listings: 1/8 total lists

Neighborhood Context

• Subnet: 18.136.87.0/24
• Abuse Density: 0 (Clean classification)
• Threat Siblings: 0
• Risk Inheritance: 0

---

## Observation History

Total Observations: 21 signals tracked

Recent Activity (August 2026):

• HTTP responses returning 403 (Forbidden) status
• Server banners consistent (Jetty 12.1.5)
• No significant threat persistence observed
• Operator score: 0.2609 (Basic classification)

Historical Trend: Stable infrastructure with no escalation of malicious behavior.

---

## Relationship Graph

Internal Associations:

• DNS: Multiple references to ec2-18-136-87-141.ap-southeast-1.compute.amazonaws.com
• Network: AMAZON-SIN (18.136.0.0/16)
• No external entity correlations detected

Campaign Links: None

---

## SOC Actions & Recommendations

Current Status

No immediate security actions required. The IP represents legitimate AWS cloud infrastructure hosting services for the gegaming.co domain.

Monitoring Parameters

• Port 22 (SSH): Monitor for unauthorized access attempts
• Port 8080: Review for potential development/administrative exposure
• TLS Certificate: Valid Let's Encrypt certificate with multiple subdomains

Firewall Considerations

• Standard AWS traffic patterns expected
• No blocking recommended based on current risk profile
• Consider geographic restrictions if service is Singapore-only

---

## Conclusion

IP 18.136.87.141 is classified as low-risk AWS cloud infrastructure. The IP hosts web services for the gegaming.co domain via Jetty web server with standard HTTP/HTTPS/SSH ports. No malicious indicators, threat associations, or abuse patterns detected. Recommended for standard SOC monitoring with attention to SSH access controls and port 8080 exposure.

Confidence Level: High

Last Updated: Current intelligence cycle

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.