18.97.19.204📋 Copy

# IP Intelligence Briefing: 18.97.19.204/32

## Executive Summary

IP 18.97.19.204 is a low-risk (score 25) cloud compute host operated by Amazon Web Services (AWS) in Ashburn, VA. The address resolves to reposify.net infrastructure with consistent benign classification across all observation signals.

---

## Technical Profile

Ownership & Network Classification

• Provider: Amazon Web Services (ASN 14618)
• Organization: Amazon Technologies Inc.
• Network Block: 18.32.0.0/11 (AT-88-Z)
• Infrastructure Type: Cloud Compute / Cloud Hosting
• BGP Prefix: 18.97.0.0/18

Geolocation

• Location: Ashburn, Virginia, US (39.04°N, -77.49°W)
• Timezone: America/New_York
• Validation: GeoPlausible confirmed

DNS Resolution

• PTR Hostname: scanner-18-97-19-204.reposify.net
• Domain: reposify.net
• Resolution Status: Forward confirmed

Active Services

• Port 80/TCP: HTTP (Reposify banner detected)
• TLS: No certificate installed

---

## Threat Assessment

Risk Profile

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not elevated
• Blacklist Status: 0 blacklists
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No

Threat Indicators

• No malicious activity indicators present
• No spam source classification
• No proxy/VPN classification

---

## Observation History

Signal Timeline: 23 observations recorded

• Recent Signals: Consistent cloud infrastructure classification
• Geolocation Signals: Multiple confirmations of Ashburn, VA location
• DNS Listings: 8 total blacklist listings, 1 active listing (severity: high)
• Operator Score: 0.2609 (Basic operator classification)
• Threat Persistence: No persistent malicious behavior detected

Temporal Analysis

• Ownership changes: 0
• Threat observation count: 0
• Is persistently malicious: No

---

## Network Neighborhood Analysis

Subnet Overview: 18.97.19.0/24

• Total Siblings: 26 IPs
• Active Siblings: 17
• Abuse Density: 0.0385 (3.85%)
• Classification: Clean

Risk Distribution in Subnet

• High Risk: 0 IPs
• Medium Risk: 1 IP
• Low Risk: 25 IPs (including 18.97.19.204)

Notable Neighbors: Multiple adjacent IPs show similar risk score 25 with authority score 60, indicating consistent cloud infrastructure deployment across the subnet.

---

## Relationship Graph

Identified Relationships:

• DNS associations to scanner-18-97-19-204.reposify.net
• Network associations to AT-88-Z (same network block)
• No cross-organizational or external entity relationships detected

---

## Security Recommendations

Current Risk Level: Low

Recommended Action: Monitor / Allow

Rationale:

• AWS cloud infrastructure with legitimate DNS registration
• No active threat indicators or malicious behavior
• Subnet abuse density below typical thresholds (3.85%)
• Hostname indicates scanning infrastructure but context suggests authorized use

Firewall Rules: None required at this time. Standard traffic monitoring recommended.

---

Analysis Timestamp: Generated from IPDebrief intelligence platform

Data Sources: Multiple geolocation, DNS, and threat intelligence feeds

Classification: Defensive Security Intelligence

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.