# 18.97.5.30 — IP Intelligence Summary 18.97.5.30 is an IPv4 address operated by Amazon Technologies Inc. (AS14618), geolocated to Ashburn, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name scanner-18-97-5-30.reposify.net. As of October 12, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/18.97.5.30 - Last updated: 2026-10-12 ## Ownership - Organization: Amazon Technologies Inc. - Network name: AT-88-Z - Allocated block: 18.32.0.0/11 - ASN: AS14618 (https://ipdebrief.com/asn/14618) - Regional registry: ARIN - Cloud / hosting provider: Amazon Web Services ## Location - City: Ashburn - Region: VA - Country: United States - Time zone: America/New_York ## Network classification - Infrastructure type: CloudCompute - Datacenter / hosting: yes - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - scanner-18-97-5-30.reposify.net - Forward-confirmed: yes ## Exposed services - 80/tcp — http ## Analyst narrative \# IP INTELLIGENCE BRIEFING: 18.97.5.30 \## Executive Summary IP address 18.97.5.30 is classified as **Low Risk** (risk score: 0) with no active threat indicators. The address belongs to Amazon Web Services cloud infrastructure (AWS) and is geolocated to Ashburn, VA. No open ports or services are detected, indicating the IP is firewalled. No recommended security actions are required based on current risk assessment. \--- \## Technical Profile | Attribute | Value | |-----------|-------| | **IP Address** | 18.97.5.30/32 | | **Risk Score** | 0 (Low Risk) | | **Provider** | Amazon Web Services (AWS) | | **ASN** | 14618 (Amazon Technologies Inc.) | | **CIDR Block** | 18.32.0.0/11 | | **Geolocation** | Ashburn, VA, US (39.04, -77.49) | | **Classification** | CloudCompute / Firewalled | | **Infrastructure Type** | Cloud Hosting | \--- \## Network Neighborhood Analysis The IP resides in subnet 18.97.5.0/24 with the following characteristics: \- **Total Siblings:** 23 IPs in /24 \- **Active Siblings:** 20 \- **Threat Siblings:** 3 (low-level risk scores) \- **Abuse Density:** 0.1304 (moderate) \- **Subnet Classification:** mostly_clean **Risk Distribution in /24:** \- High Risk: 0 \- Medium Risk: 2 (IPs 18.97.5.34, 18.97.5.35 with risk scores of 40) \- Low Risk: 19 The neighborhood shows minimal threat activity with the majority of sibling IPs maintaining low risk scores. \--- \## DNS & Hostname Resolution | Signal Type | Value | |-------------|-------| | **PTR Hostname** | scanner-18-97-5-30.reposify.net | | **Forward Resolution** | scanner-18-97-5-30.reposify.net | | **Hosted Domain** | reposify.net | | **Forward Confirmed** | Yes | DNS records show association with reposify.net infrastructure. No email authentication records (SPF/DMARC) configured for this hostname. \--- \## Threat Intelligence Assessment **Active Threat Indicators:** None detected \- **Blacklist Count:** 0 \- **Tor Exit Node:** No \- **Known Attacker:** No \- **Spam Source:** No \- **Campaign Likelihood:** Not detected \- **Certificate Matches:** 0 **Control Plane Data:** \- Route Stability: False \- Operator Score: 0.2609 (Basic) \- DNSBL Listed: 0/8 \- RPKI State: Not validated \--- \## Observation History **Total Observations:** 17 signals recorded Most recent activity (August 5, 2026): \- Geolocation signals confirmed Ashburn, VA with 0.56 confidence \- Traceroute completed (30 hops, target not reached) \- Network classification maintained as "mostly_clean" \- No ownership or threat persistence changes detected The IP maintains consistent geolocation and classification signals with no escalation in risk over time. \--- \## Services & Ports | Service | Status | |---------|--------| | **Open Ports** | None detected | | **TLS Certificate** | None | | **HTTP Title** | None | | **Server Banner** | None | No active services detected; the infrastructure appears to be properly firewalled with no exposed endpoints. \--- \## Recommended Actions **Current Status:** No action required The IP address presents minimal threat: \- Risk score: 0 \- No active threat indicators \- No recommended firewall rules or blocking actions \- Standard monitoring is sufficient **Monitoring Recommendation:** Continue standard traffic observation. No immediate defensive actions required. \--- \## Intelligence Assessment This IP address represents legitimate cloud infrastructure hosting under AWS with no malicious activity detected. The hostname association with reposify.net suggests potential scanning infrastructure deployment, but the address itself shows no active threat behavior. The subnet context (18.97.5.0/24) shows low abuse density with minimal threat siblings. **Threat Confidence Level:** Low **Recommended Handling:** Allow traffic with standard monitoring ## Nearby addresses - 18.97.5.5 (https://ipdebrief.com/18.97.5.5) - 18.97.5.11 (https://ipdebrief.com/18.97.5.11) - 18.97.5.13 (https://ipdebrief.com/18.97.5.13) - 18.97.5.20 (https://ipdebrief.com/18.97.5.20) - 18.97.5.22 (https://ipdebrief.com/18.97.5.22) - 18.97.5.23 (https://ipdebrief.com/18.97.5.23) - 18.97.5.26 (https://ipdebrief.com/18.97.5.26) - 18.97.5.27 (https://ipdebrief.com/18.97.5.27) - 18.97.5.28 (https://ipdebrief.com/18.97.5.28) - 18.97.5.32 (https://ipdebrief.com/18.97.5.32) - 18.97.5.34 (https://ipdebrief.com/18.97.5.34) - 18.97.5.35 (https://ipdebrief.com/18.97.5.35) --- Source: IPDebrief, "18.97.5.30 IP intelligence", https://ipdebrief.com/18.97.5.30, updated 2026-10-12. Assessments are probabilistic.