# IP Intelligence Briefing: 44.220.185.69/32
## Executive Summary
IP address 44.220.185.69 is a low-risk cloud infrastructure endpoint hosted on Amazon Web Services in the Northern Virginia region. The IP is associated with the reposify.net domain and functions as a scanner service endpoint. No active threat indicators or malicious behavior have been detected.
## Infrastructure Profile
- IP Address: 44.220.185.69
- Risk Score: 25 (Low Risk)
- Provider: Amazon Web Services (AWS)
- ASN: 14618
- Organization: Amazon Data Services Northern Virginia
- Geolocation: Ashburn, VA, US (39.04°N, -77.49°W)
- Infrastructure Type: CloudCompute
- Network Role: Cloud Hosting
## DNS and Service Analysis
- Reverse DNS: scanner-44-220-185-69.reposify.net
- Forward DNS: scanner-44-220-185-69.reposify.net
- Hosted Domain: reposify.net
- Open Ports: None detected
- HTTP Service: Service returns 200 OK on HTTP/1.0
- TLS Certificate: Not present
- Email Authentication: SPF and DMARC records configured
## Threat Assessment
- Threat Indicators: None detected
- Blacklist Status: 0 lists
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Campaign Association: None identified
- Abuse Confidence Score: Not applicable
- Historical Threat Persistence: 0 days
## Neighborhood Analysis
The IP resides in subnet 44.220.185.0/24 with the following characteristics:
- Total Neighbors: 33
- Abuse Density: 0
- Subnet Classification: Mixed
- Risk Distribution: 0 high-risk, 21 medium-risk, 12 low-risk IPs
- Sibling Risk Scores: Range from 0 to 50, with most clustering at 40 (medium risk) and 25 (low risk)
- Notable Siblings: 44.220.185.134 (risk 50), 44.220.185.4, .12, .22, .25, .29, .35, .36, .53, .61, .62, .78, .79, .85, .93, .100, .102, .113, .127, .133, .136, .155, .162, .178, .183, .194, .195, .208, .227, .231, .236, .252, .254
## Historical Observation Summary
- Total Observations: 23
- Observation Period: June 20, 2026 β June 28, 2026
- Cloud Provider Classification: Consistently identified as Amazon Web Services CloudCompute infrastructure
- Operator Score: 0.2609 (Basic)
- Subnet Abuse Density: Consistent at 0.5 across observations
- Stability: No ownership changes detected
- Threat Persistence: Not persistently malicious
## Relationship Graph
- DNS Associations: scanner-44-220-185-69.reposify.net (multiple entries)
- Network Associations: AMAZON-IAD (Northern Virginia AWS region)
- Total Relationships: 59
## Recommended Actions
No specific firewall rules or security actions are recommended at this time. The IP is classified as low risk with no active threat indicators. The hostname "scanner" suggests this endpoint may be used for service scanning or health monitoring by reposify.net infrastructure.
## Intelligence Narrative
44.220.185.69 operates as a legitimate AWS cloud endpoint in the Northern Virginia region, associated with reposify.net. The reverse DNS hostname indicates scanner functionality, which is consistent with cloud infrastructure monitoring and service discovery operations. The IP shows no signs of malicious activity, with zero threat indicators and no blacklist presence. The subnet environment is mixed, with moderate-risk sibling IPs that may represent legitimate cloud computing workloads. Historical observations confirm consistent infrastructure classification and no escalation in threat behavior. Monitoring is recommended but no immediate blocking action is warranted.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS14618 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | scanner-44-220-185-69.reposify.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | scanner-44-220-185-69.reposify.net |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | Reposify |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 20% | 2 | 3 |
| reputation | 22% | 1 | 2 |
| geolocation | 33% | 2 | 3 |
| Overall | 25% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-18 21:28:42 UTC |
| Last Seen | 2026-06-28 08:04:26 UTC |
| Profile Built | 2026-06-29 02:07:55 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 25 |
Full dossier details are available via our API.