18.202.11.174
18.202.11.174 is an IPv4 address operated by Amazon Data Services Ireland Limited (AS16509), geolocated to Dublin, Ireland. Its reverse DNS name is ec2-18-202-11-174.eu-west-1.compute.amazonaws.com. As of October 21, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.
Intelligence Briefing: 18.202.11.174
Assessment: High Risk (Score: 70). The system classified the IP as Campaign Infrastructure with a high likelihood of association with coordinated attack activity.
Infrastructure: The address was identified as Amazon Web Services infrastructure within the AMAZON-DUB network (18.202.0.0/15) in Dublin, IE. However, the TLS certificate indicated SAMSUNG ELECTRONICS CO,.LTD (C=KR), creating a contradiction with the primary geolocation data.
Correlation: The IP was correlated with 22 other IPs sharing the same certificate subject. No honeypot hits or enumeration strikes were recorded during the observation period.
Recommendation: Block. A critical severity recommendation was generated based on the high risk score and strong threat evidence. Firewall rules should be applied to drop traffic from this source immediately.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Ireland Limited |
| ASN | AS16509 |
| Network Name | AMAZON-DUB |
| CIDR Block | 18.202.0.0/15 |
| RIR | ARIN |
| Country | Ireland |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-18-202-11-174.eu-west-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-18-202-11-174.eu-west-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS16509 |
| Network Prefix | 18.202.0.0/15 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 38% | 2 | 4 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 30% | 10 | 16 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims KR but primary geo says IE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-18 06:01:13 UTC |
| Last Seen | 2026-10-21 06:09:42 UTC |
| Profile Built | 2026-10-21 06:19:55 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 27 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 18.202.11.174
Who owns the IP address 18.202.11.174?
18.202.11.174 is registered to Amazon Data Services Ireland Limited. The address falls within the 18.202.0.0/15 network block. Registration is held at ARIN.
Where is 18.202.11.174 located?
Geolocation data places 18.202.11.174 in Dublin, D, Ireland. The local time zone is Europe/Dublin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 18.202.11.174 malicious or safe?
18.202.11.174 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 18.202.11.174?
The reverse DNS (PTR) record for 18.202.11.174 is ec2-18-202-11-174.eu-west-1.compute.amazonaws.com. This hostname is forward-confirmed, meaning it resolves back to the same address.