# 18.97.5.54 — IP Intelligence Summary 18.97.5.54 is an IPv4 address operated by Amazon Technologies Inc. (AS14618), geolocated to Ashburn, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name scanner-18-97-5-54.reposify.net. As of October 8, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/18.97.5.54 - Last updated: 2026-10-08 ## Ownership - Organization: Amazon Technologies Inc. - Network name: AT-88-Z - Allocated block: 18.32.0.0/11 - ASN: AS14618 (https://ipdebrief.com/asn/14618) - Regional registry: ARIN - Cloud / hosting provider: Amazon Web Services ## Location - City: Ashburn - Region: VA - Country: United States - Time zone: America/New_York ## Network classification - Infrastructure type: CloudCompute - Datacenter / hosting: yes - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - scanner-18-97-5-54.reposify.net - Forward-confirmed: yes ## Analyst narrative \# INTELLIGENCE BRIEFING: IP 18.97.5.54/32 **Classification:** Low Risk / Infrastructure **Date:** 2026-07-05 **Prepared By:** IPDebrief Intelligence Team \--- \## EXECUTIVE SUMMARY IP address 18.97.5.54/32 is a low-risk infrastructure address operated by Amazon Web Services (AWS) in Ashburn, Virginia. The IP exhibits no active threat indicators, no known malicious campaigns, and operates with minimal operator score (0.1304). The address is associated with hostname scanner-18-97-5-54.reposify.net and resides within a subnet showing mixed classification with 4 threat-sibling IPs among 11 total siblings. \--- \## OWNERSHIP & INFRASTRUCTURE | Attribute | Value | |-----------|-------| | **ASN** | 14618 | | **Organization** | Amazon Technologies Inc. | | **Network** | AT-88-Z | | **CIDR Block** | 18.32.0.0/11 | | **RIR** | ARIN | | **Geolocation** | Ashburn, VA, United States | | **Coordinates** | 39.04°N, -77.49°W | | **Timezone** | America/New_York | **Network Role:** Classified as cloud infrastructure with no active services detected. The IP is firewalled with no open ports observed. \--- \## THREAT INDICATORS | Indicator | Status | |-----------|--------| | **Risk Score** | 25 (Low Risk) | | **Abuse Confidence** | Not applicable | | **Blacklist Count** | 0 | | **Tor Exit Node** | No | | **Known Attacker** | No | | **Spam Source** | No | | **Campaign Association** | None identified | | **Threat Feeds** | Empty | **Control Plane Assessment:** \- BGP Prefix: 18.97.0.0/18 \- Route Stability: False \- DNSSEC: Valid \- DNSBL Listings: 1 of 8 total lists \- Operator Score: 0.1304 (Minimal) \- ICMP Validation: Blocked (unable to validate) \--- \## DNS & HOSTNAME ASSOCIATIONS | Field | Value | |-------|-------| | **PTR Hostname** | scanner-18-97-5-54.reposify.net | | **Forward Confirmed** | Yes | | **Domain** | reposify.net | | **Hosted Domain Count** | 0 | | **SPF Record** | Present | | **DMARC Record** | Present | **DNS Analysis:** Forward resolution confirmed for reposify.net domain. Email authentication records (SPF/DMARC) present. The hostname prefix "scanner-" suggests potential scanning or monitoring activity, though no malicious behavior detected. \--- \## NEIGHBORHOOD ANALYSIS (18.97.5.0/24) | Metric | Value | |--------|-------| | **Abuse Density** | 0.3636 (36.36%) | | **Classification** | Mixed | | **Inherited Risk** | 10 | | **Total Siblings** | 11 | | **Active Siblings** | 8 | | **Threat Siblings** | 4 | | **Risk Distribution** | 17 Low / 0 Medium / 0 High | **Notable Neighbors:** Multiple IPs within the /24 subnet show risk scores of 25 with authority scores of 50-60, indicating this subnet contains elevated risk addresses alongside the target IP. \--- \## OBSERVATION HISTORY **Total Observations:** 18 signals collected **Recent Activity (2026-07-05):** \- Geolocation signals confirmed Ashburn, VA location with 56-85% confidence \- Ownership stability verified (0 ownership changes) \- Subnet abuse density recorded at 0.3636 \- No threat persistence days recorded \- No persistent malicious classification **Temporal Analysis:** \- Ownership Changes: 0 \- Threat Persistence Days: 0 \- Threat Observation Count: 0 \- Persistently Malicious: False \--- \## RELATIONSHIP GRAPH **8 relationships identified:** 1. **Same Network:** AT-88-Z (AWS network segment) 2. **DNS Association:** scanner-18-97-5-54.reposify.net (hostname) 3. **Same Network:** AT-88-Z (repeated network association) All relationships indicate standard AWS infrastructure associations with no anomalous connections to external threat actors or malicious networks. \--- \## RECOMMENDED ACTIONS | Action | Severity | |--------|----------| | **Monitor DNS activity for reposify.net domain** | LOW | | **Review subnet 18.97.5.0/24 for threat siblings** | LOW | | **No immediate blocking recommended** | N/A | **Firewall Rules:** No blocking rules recommended at this time. The IP presents low risk with no active threat indicators. \--- \## INTELLIGENCE CONCLUSION IP 18.97.5.54/32 is a legitimate AWS infrastructure address in Ashburn, Virginia. The address shows no evidence of malicious activity, though it operates within a subnet exhibiting mixed classification with 4 threat-sibling IPs. The hostname association (scanner-*) warrants standard monitoring but does not indicate active scanning activity. **Risk Level:** LOW **Confidence:** HIGH **Immediate Action:** None required; continue standard monitoring. ## Nearby addresses - 18.97.5.5 (https://ipdebrief.com/18.97.5.5) - 18.97.5.11 (https://ipdebrief.com/18.97.5.11) - 18.97.5.13 (https://ipdebrief.com/18.97.5.13) - 18.97.5.20 (https://ipdebrief.com/18.97.5.20) - 18.97.5.22 (https://ipdebrief.com/18.97.5.22) - 18.97.5.23 (https://ipdebrief.com/18.97.5.23) - 18.97.5.26 (https://ipdebrief.com/18.97.5.26) - 18.97.5.27 (https://ipdebrief.com/18.97.5.27) - 18.97.5.28 (https://ipdebrief.com/18.97.5.28) - 18.97.5.30 (https://ipdebrief.com/18.97.5.30) - 18.97.5.32 (https://ipdebrief.com/18.97.5.32) - 18.97.5.34 (https://ipdebrief.com/18.97.5.34) --- Source: IPDebrief, "18.97.5.54 IP intelligence", https://ipdebrief.com/18.97.5.54, updated 2026-10-08. Assessments are probabilistic.