18.190.54.19
Subject: Intelligence Briefing – 18.190.54.19
Ownership and Infrastructure:
The IP address 18.190.54.19 was assigned to Amazon Technologies Inc. (AS16509) within the 18.32.0.0/11 CIDR block. Geolocation data placed the endpoint in Columbus, OH, US. The address resolved to the PTR hostname ec2-18-190-54-19.us-east-2.compute.amazonaws.com, with forward DNS confirmed.
Services and Protocols:
Observations identified TCP port 443 as open, serving HTTPS traffic. The server banner returned awselb/2.0. TLS certificates were issued by Amazon RSA 2048 M01 for the subject *.samsungiotcloud.com.
Threat Posture:
The endpoint maintained a Low Risk reputation with a risk score of 0. It was not listed on any blacklists, recorded an abuse confidence score of null, and showed no association with known campaigns. Behavioral analysis indicated zero honeypot hits, WAF violations, or enumeration strikes.
Recommendation:
Analysis concluded the endpoint was a legitimate Web Server. The recommended action was to Allow traffic with info-level severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AT-88-Z |
| CIDR Block | 18.32.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-18-190-54-19.us-east-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-18-190-54-19.us-east-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | awselb/2.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.samsungiotcloud.com |
| Valid From | 2026-04-26T00:00:00+00:00 |
| Valid Until | 2026-11-09T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 075BD7145C2B6E624989CC2D743E74EE |
| Thumbprint | 77CFBAA1A2DE275FF7190B0A0B2E415179DEAF5A |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-09 14:26:40 UTC |
| Last Seen | 2026-09-09 14:26:40 UTC |
| Profile Built | 2026-09-09 14:40:36 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 24 |
Full dossier details are available via our API.