# 18.202.11.174 — IP Intelligence Summary

18.202.11.174 is an IPv4 address operated by Amazon Data Services Ireland Limited (AS16509), geolocated to Dublin, Ireland. Its reverse DNS name is ec2-18-202-11-174.eu-west-1.compute.amazonaws.com. As of October 21, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/18.202.11.174
- Last updated: 2026-10-21

## Ownership

- Organization: Amazon Data Services Ireland Limited
- Network name: AMAZON-DUB
- Allocated block: 18.202.0.0/15
- ASN: AS16509 (https://ipdebrief.com/asn/16509)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Dublin
- Region: D
- Country: Ireland
- Time zone: Europe/Dublin

## Network classification

- Infrastructure type: Unknown
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ec2-18-202-11-174.eu-west-1.compute.amazonaws.com
- Forward-confirmed: yes

## Analyst narrative

**Intelligence Briefing: 18.202.11.174**

**Assessment:** High Risk (Score: 70). The system classified the IP as Campaign Infrastructure with a high likelihood of association with coordinated attack activity.

**Infrastructure:** The address was identified as Amazon Web Services infrastructure within the AMAZON-DUB network (18.202.0.0/15) in Dublin, IE. However, the TLS certificate indicated SAMSUNG ELECTRONICS CO,.LTD (C=KR), creating a contradiction with the primary geolocation data.

**Correlation:** The IP was correlated with 22 other IPs sharing the same certificate subject. No honeypot hits or enumeration strikes were recorded during the observation period.

**Recommendation:** Block. A critical severity recommendation was generated based on the high risk score and strong threat evidence. Firewall rules should be applied to drop traffic from this source immediately.

## Addresses sharing infrastructure

- 18.200.101.153 — Same TLS certificate (https://ipdebrief.com/18.200.101.153)
- 34.243.172.14 — Same TLS certificate (https://ipdebrief.com/34.243.172.14)
- 34.252.207.252 — Same TLS certificate (https://ipdebrief.com/34.252.207.252)
- 34.255.249.241 — Same TLS certificate (https://ipdebrief.com/34.255.249.241)
- 40.180.109.3 — Same TLS certificate (https://ipdebrief.com/40.180.109.3)
- 40.180.182.103 — Same TLS certificate (https://ipdebrief.com/40.180.182.103)
- 52.16.93.123 — Same TLS certificate (https://ipdebrief.com/52.16.93.123)
- 52.19.19.143 — Same TLS certificate (https://ipdebrief.com/52.19.19.143)
- 52.19.85.224 — Same TLS certificate (https://ipdebrief.com/52.19.85.224)
- 52.30.120.172 — Same TLS certificate (https://ipdebrief.com/52.30.120.172)
- 52.30.184.91 — Same TLS certificate (https://ipdebrief.com/52.30.184.91)
- 52.31.231.153 — Same TLS certificate (https://ipdebrief.com/52.31.231.153)

---

Source: IPDebrief, "18.202.11.174 IP intelligence", https://ipdebrief.com/18.202.11.174, updated 2026-10-21. Assessments are probabilistic.