18.97.5.94📋 Copy

# IP Intelligence Briefing: 18.97.5.94/32

Classification: LOW RISK | Reputation Score: 25/100 | Status: Active

## Executive Summary

IP address 18.97.5.94 is a low-risk infrastructure address hosted by Amazon Web Services. The IP exhibits no active threat indicators and is associated with Amazon's cloud infrastructure in Ashburn, Virginia. Recommended action: Monitor but no immediate blocking required.

## Infrastructure Profile

• IP: 18.97.5.94/32
• Organization: Amazon Technologies Inc.
• ASN: 14618 (Amazon.com, Inc.)
• Network Block: 18.32.0.0/11
• Geolocation: Ashburn, Virginia, US (39.04°N, -77.49°W)
• Infrastructure Type: Cloud/CDN (AWS infrastructure)
• Status: Firewalled / No Services Detected

## Threat Assessment

The IP shows no evidence of malicious activity. No threat indicators were detected across multiple signal sources.

## Network Context

Subnet Analysis (18.97.5.0/24):

• Abuse Density: 0.5 (Moderate)
• Classification: Mixed
• Total Siblings: 7
• Active Siblings: 3

Neighbor Risk Distribution:

• High Risk (40+): 3 IPs
• Medium Risk (25): 3 IPs
• Low Risk (0-24): 4 IPs

## DNS Intelligence

• PTR Record: scanner-18-97-5-94.reposify.net
• Forward Resolution: reposify.net (1 record)
• Email Authentication: SPF and DMARC configured
• Associated Domain: reposify.net

The DNS infrastructure indicates legitimate service hosting with proper email authentication controls in place.

## Historical Observations

Recent signal history shows consistent low-risk behavior with no escalation in threat signals. Ownership has remained stable with no malicious activity detected over the observation period.

## Recommended Actions

No immediate action required. The IP presents as legitimate cloud infrastructure. Standard monitoring practices recommended.

Firewall Rules: Not recommended for this IP.

## SOC Analyst Notes

This address is part of Amazon's cloud infrastructure and appears to be legitimately hosted. The "scanner" hostname in DNS may indicate automated monitoring or legitimate scanning operations. With a risk score of 25 and no active threat indicators, this IP should be treated as benign infrastructure. Continue standard monitoring procedures.

Last Updated: Current intelligence data as of analysis date

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.