IP Intelligence Briefing: 18.97.19.154
Date: 2026-06-05
---
**1. Profile Summary**
- Risk Score: 25 (Low Risk)
- Ownership: Amazon Technologies Inc. (ASN 14618, ARIN)
- Geolocation: Ashburn, VA, US (39.04°N, -77.49°E)
- Network Role: AWS CloudCompute infrastructure (Firewalled / No Services)
- Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).
---
**2. Observation History**
- Latest Activity: May 31, 2026 (confidence: 0.85).
- Key Trends:
- Stable ownership with no recent changes.
- Subnet abuse density: 0.3 (mixed classification).
- No persistent malicious behavior observed.
---
**3. Relationships**
- Linked Hostname: `scanner-18-97-19-154.reposify.net` (DNS PTR confirmed).
- Network Associations:
- Same subnet (`18.97.19.154/24`) with 10 siblings.
- Shared network (`AT-88-Z`) with Amazon.
- No Known Threat Connections: No correlated IPs or malicious campaigns.
---
**4. Neighborhood Analysis**
- Subnet: `18.97.19.154/24` (abuse density: 0.3).
- Neighbor Risk Distribution:
- 4 IPs with moderate risk (25β50).
- 7 IPs with low risk (25).
- Notable Neighbors:
- `18.97.19.133` (risk: 50), `18.97.19.185` (risk: 50), `18.97.19.249` (risk: 50).
---
**5. Recommendations**
- Monitor Subnet: Track high-risk neighbors for potential lateral movement.
- Verify Hostname: Investigate `scanner-18-97-19-154.reposify.net` for automated scanning or CI/CD activity.
- No Immediate Action: No evidence of active threats, but maintain visibility due to cloud infrastructure and scanning hostname.
---
Source: IPDebrief Threat Intelligence Platform.
Note: This IP is associated with AWS infrastructure, but its hostname suggests potential use for scanning or testing. No confirmed malicious activity detected.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS14618 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | scanner-18-97-19-154.reposify.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | scanner-18-97-19-154.reposify.net |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| Closed Ports | 22, 25, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | Reposify |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 34% | 2 | 3 |
| ownership | 24% | 2 | 3 |
| reputation | 31% | 1 | 3 |
| geolocation | 25% | 2 | 2 |
| Overall | 25% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-11 08:58:01 UTC |
| Last Seen | 2026-06-27 19:11:33 UTC |
| Profile Built | 2026-06-28 13:17:34 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 26 |
Full dossier details are available via our API.