18.235.2.135
# IP Intelligence Briefing: 18.235.2.135
Classification: Low Risk Infrastructure Host
Date: Current
Analyst: IPDebrief Intelligence
---
## Executive Summary
IP 18.235.2.135 is a legitimate Amazon Web Services EC2 instance with a low risk profile (score: 25). No malicious indicators detected. The IP represents routine cloud infrastructure hosting in Ashburn, Virginia.
---
## Ownership & Network Attribution
| Attribute | Value |
|---|---|
| **Organization** | Amazon Technologies Inc. |
| **ASN** | 14618 (Amazon) |
| **Netname** | AT-88-Z |
| **CIDR Block** | 18.32.0.0/11 |
| **Geolocation** | Ashburn, Virginia, US |
DNS resolution confirms AWS ownership: `ec2-18-235-2-135.compute-1.amazonaws.com`
---
## Threat Assessment
Risk Score: 25/100 (Low)
| Indicator | Status |
|---|---|
| Known Attacker | No |
| Spam Source | No |
| Tor Exit Node | No |
| Blacklist Count | 0 |
| DNSBL Listed | 1 of 8 (non-critical) |
Threat Feeds: No indicators across threat intelligence sources.
---
## Network Services & Exposed Ports
Open Port: TCP/3389 (RDP)
Note: RDP exposure is atypical for AWS EC2 instances. While this may indicate legitimate administrative access, it warrants awareness for potential lateral movement scenarios.
---
## Neighborhood Analysis
Subnet: 18.235.2.0/24
| Metric | Value |
|---|---|
| Abuse Density | 0% |
| Threat Siblings | 0 |
| Classification | Clean |
No malicious activity detected in adjacent IP addresses.
---
## Historical Signal Analysis
Observation Count: 20 signals
Key Observations:
- Ownership stable (no changes detected)
- Threat persistence: 0 days
- Is persistently malicious: False
- Recent subnet classification: Clean
No trending increase in risk signals over the observation window.
---
## Relationship Graph
12 relationships detected:
- Multiple "Same Network" references to AT-88-Z
- DNS associations to AWS EC2 hostname (repeated)
No external organization or certificate associations identified.
---
## Recommended Actions
Current Risk Profile: Low
Recommended Posture: Monitor
- No immediate firewall blocking required
- RDP exposure warrants traffic logging and monitoring
- Standard AWS infrastructure assumptions apply
Firewall Rules: None recommended
---
## Intelligence Conclusion
IP 18.235.2.135 represents normal AWS cloud infrastructure. The presence of an open RDP port is unusual for this provider but does not indicate compromise. Monitor for anomalous traffic patterns from this endpoint. No defensive action required beyond standard logging and observation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS14618 |
| Network Name | AT-88-Z |
| CIDR Block | 18.32.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-18-235-2-135.compute-1.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-18-235-2-135.compute-1.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 3389 | rdp | tcp | — |
| Closed Ports | 22, 25, 80, 443, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-29 10:33:42 UTC |
| Last Seen | 2026-08-12 23:22:03 UTC |
| Profile Built | 2026-08-12 23:27:48 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.