# 18.97.19.204 — IP Intelligence Summary

18.97.19.204 is an IPv4 address operated by Amazon Technologies Inc. (AS14618), geolocated to Ashburn, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name scanner-18-97-19-204.reposify.net. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/18.97.19.204
- Last updated: 2026-10-06

## Ownership

- Organization: Amazon Technologies Inc.
- Network name: AT-88-Z
- Allocated block: 18.32.0.0/11
- ASN: AS14618 (https://ipdebrief.com/asn/14618)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Ashburn
- Region: VA
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- scanner-18-97-19-204.reposify.net
- Forward-confirmed: yes

## Exposed services

- 80/tcp — http

## Analyst narrative

\# IP Intelligence Briefing: 18.97.19.204/32

\## Executive Summary

IP 18.97.19.204 is a low-risk (score 25) cloud compute host operated by Amazon Web Services (AWS) in Ashburn, VA. The address resolves to reposify.net infrastructure with consistent benign classification across all observation signals.

\---

\## Technical Profile

**Ownership & Network Classification**

\- **Provider:** Amazon Web Services (ASN 14618)

\- **Organization:** Amazon Technologies Inc.

\- **Network Block:** 18.32.0.0/11 (AT-88-Z)

\- **Infrastructure Type:** Cloud Compute / Cloud Hosting

\- **BGP Prefix:** 18.97.0.0/18

**Geolocation**

\- **Location:** Ashburn, Virginia, US (39.04°N, -77.49°W)

\- **Timezone:** America/New_York

\- **Validation:** GeoPlausible confirmed

**DNS Resolution**

\- **PTR Hostname:** scanner-18-97-19-204.reposify.net

\- **Domain:** reposify.net

\- **Resolution Status:** Forward confirmed

**Active Services**

\- **Port 80/TCP:** HTTP (Reposify banner detected)

\- **TLS:** No certificate installed

\---

\## Threat Assessment

**Risk Profile**

\- **Risk Score:** 25 (Low Risk)

\- **Abuse Confidence:** Not elevated

\- **Blacklist Status:** 0 blacklists

\- **Known Campaigns:** None detected

\- **Tor Exit Node:** No

\- **Known Attacker:** No

**Threat Indicators**

\- No malicious activity indicators present

\- No spam source classification

\- No proxy/VPN classification

\---

\## Observation History

**Signal Timeline:** 23 observations recorded

\- **Recent Signals:** Consistent cloud infrastructure classification

\- **Geolocation Signals:** Multiple confirmations of Ashburn, VA location

\- **DNS Listings:** 8 total blacklist listings, 1 active listing (severity: high)

\- **Operator Score:** 0.2609 (Basic operator classification)

\- **Threat Persistence:** No persistent malicious behavior detected

**Temporal Analysis**

\- Ownership changes: 0

\- Threat observation count: 0

\- Is persistently malicious: No

\---

\## Network Neighborhood Analysis

**Subnet Overview:** 18.97.19.0/24

\- **Total Siblings:** 26 IPs

\- **Active Siblings:** 17

\- **Abuse Density:** 0.0385 (3.85%)

\- **Classification:** Clean

**Risk Distribution in Subnet**

\- High Risk: 0 IPs

\- Medium Risk: 1 IP

\- Low Risk: 25 IPs (including 18.97.19.204)

**Notable Neighbors:** Multiple adjacent IPs show similar risk score 25 with authority score 60, indicating consistent cloud infrastructure deployment across the subnet.

\---

\## Relationship Graph

**Identified Relationships:**

\- DNS associations to scanner-18-97-19-204.reposify.net

\- Network associations to AT-88-Z (same network block)

\- No cross-organizational or external entity relationships detected

\---

\## Security Recommendations

**Current Risk Level:** Low

**Recommended Action:** Monitor / Allow

**Rationale:**

\- AWS cloud infrastructure with legitimate DNS registration

\- No active threat indicators or malicious behavior

\- Subnet abuse density below typical thresholds (3.85%)

\- Hostname indicates scanning infrastructure but context suggests authorized use

**Firewall Rules:** None required at this time. Standard traffic monitoring recommended.

\---

**Analysis Timestamp:** Generated from IPDebrief intelligence platform

**Data Sources:** Multiple geolocation, DNS, and threat intelligence feeds

**Classification:** Defensive Security Intelligence

## Nearby addresses

- 18.97.19.130 (https://ipdebrief.com/18.97.19.130)
- 18.97.19.133 (https://ipdebrief.com/18.97.19.133)
- 18.97.19.135 (https://ipdebrief.com/18.97.19.135)
- 18.97.19.141 (https://ipdebrief.com/18.97.19.141)
- 18.97.19.147 (https://ipdebrief.com/18.97.19.147)
- 18.97.19.154 (https://ipdebrief.com/18.97.19.154)
- 18.97.19.160 (https://ipdebrief.com/18.97.19.160)
- 18.97.19.163 (https://ipdebrief.com/18.97.19.163)
- 18.97.19.165 (https://ipdebrief.com/18.97.19.165)
- 18.97.19.167 (https://ipdebrief.com/18.97.19.167)
- 18.97.19.168 (https://ipdebrief.com/18.97.19.168)
- 18.97.19.178 (https://ipdebrief.com/18.97.19.178)

---

Source: IPDebrief, "18.97.19.204 IP intelligence", https://ipdebrief.com/18.97.19.204, updated 2026-10-06. Assessments are probabilistic.