IP Intelligence Briefing: 18.139.3.23
*Generated via IPDebrief Analysis*
1. Core Profile
- Risk Score: 25 (Low Risk)
- Ownership: Owned by Amazon Data Services Singapore (ASN 16509).
- Geolocation: Singapore (1.35°N, 103.82°E), associated with AWS infrastructure.
- Network Role: CloudCompute instance (AWS EC2), firewalled with no open services.
- Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).
2. Observation History
- Last 30 days:
- Consistent as a cloud compute resource (AWS EC2 instance).
- ICMP validation failed (firewall blocking probes), but geolocation remains plausible.
- No observed DNS anomalies or TLS certificate issues.
3. Relationships
- DNS: Linked to AWS-hosted hostname `ec2-18-139-3-23.ap-southeast-1.compute.amazonaws.com`.
- Network: Part of ASN 16509 (Amazon) and subnet `18.139.3.23/24`.
- No correlated malicious IPs in relationships.
4. Neighborhood Analysis
- Subnet: `18.139.3.23/24` (0 abuse density, 0 threat siblings).
- Neighbors: No neighboring IPs identified (subnet likely isolated or unregistered).
5. Recommendations
- Monitor: Track for unexpected geolocation changes or new DNS associations.
- No Action Required: Legitimate AWS infrastructure with no threat indicators.
- Firewall: Allow traffic based on AWS security group rules (no blocking needed).
Conclusion:
This IP is a legitimate AWS EC2 instance in Singapore with no signs of malicious activity. The ICMP block suggests strict firewall rules, but no threats were detected. SOC teams should focus on monitoring for deviations from established AWS patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Singapore |
| ASN | AS16509 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-18-139-3-23.ap-southeast-1.compute.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-18-139-3-23.ap-southeast-1.compute.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 21% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-07 23:03:57 UTC |
| Last Seen | 2026-06-27 02:25:45 UTC |
| Profile Built | 2026-06-27 20:31:56 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 28 |
Full dossier details are available via our API.