IP INTELLIGENCE BRIEFING: 44.220.185.97/32
Classification: Low Risk | Risk Score: 25/100
---
**OVERVIEW**
IP address 44.220.185.97 is an Amazon Web Services (AWS) CloudCompute resource registered to AS14618 (Amazon.com, Inc., US). The IP is located in Ashburn, Virginia (US) within the AMAZON-IAD network block (44.192.0.0/11). Current reputation assessment indicates low-risk status with no active threat indicators.
---
**OWNERSHIP & GEOLOCATION**
- ASN: 14618 (AMAZON-AES - Amazon.com, Inc., US)
- Organization: Amazon Data Services Northern Virginia
- Network Name: AMAZON-IAD
- CIDR Block: 44.192.0.0/11
- Geolocation: Ashburn, VA, US (39.04°N, -77.49°W)
- Registration: RIR: ARIN, allocated 2019-07-18
---
**DNS & HOSTING ANALYSIS**
- Reverse DNS: scanner-44-220-185-97.reposify.net
- Forward Resolution: scanner-44-220-185-97.reposify.net
- PTR Hostnames: scanner-44-220-185-97.reposify.net
- Domain: reposify.net
- Email Authentication: SPF: Yes, DMARC: Yes
- HTTP Banner: "Reposify"
- Open Ports: TCP/80 (HTTP)
---
**THREAT ASSESSMENT**
- Threat Indicators: None detected
- Blacklist Status: 0 blacklist entries
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Known Campaigns: None
- Pulsedive Risk: Not assessed
- DNSBL Listed: 1 out of 8 total lists
---
**NETWORK NEIGHBORHOOD (44.220.185.0/24)**
- Subnet Classification: Mostly Clean
- Abuse Density: 15.69% (0.1569)
- Total Sibling IPs: 51
- Active Siblings: 48
- Threat Siblings: 8
- Risk Distribution: 44 Low, 3 Medium, 0 High
- Inherited Risk: 6/100
The subnet demonstrates moderate activity levels with 8 flagged siblings. However, the target IP maintains a clean risk profile relative to neighborhood statistics.
---
**OBSERVATION HISTORY**
- Total Observations: 23
- Latest Activity: 2026-08-12
- Threat Persistence: 0 days
- Ownership Stability: No changes observed
- Signal Consistency: ASN, geolocation, and reputation data remained consistent across observation window
- Temporal Risk Trend: Stable (no escalation detected)
---
**RELATIONSHIP GRAPH**
- DNS Associations: scanner-44-220-185-97.reposify.net (multiple entries)
- Network Associations: AMAZON-IAD (44.192.0.0/11)
- Total Relationships: 41
- Cert Matches: 0
- Correlated IPs: 0
---
**RECOMMENDED ACTIONS**
No automated security actions or firewall rules generated. Risk score (25/100) falls below threshold for blocking. Standard AWS cloud compute traffic monitoring recommended.
---
**SOC ANALYST NOTES**
This IP represents legitimate AWS infrastructure hosting a service on reposify.net. The hostname pattern (scanner-44-220-185-97.reposify.net) suggests automated scanning or monitoring functionality. No malicious indicators present. If observed in inbound traffic, allow standard HTTP (port 80) with standard logging. Monitor for any escalation in threat sibling activity within the subnet.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS14618 |
| Network Name | AMAZON-IAD |
| CIDR Block | 44.192.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | scanner-44-220-185-97.reposify.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | scanner-44-220-185-97.reposify.net |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| Closed Ports | 22, 25, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | Reposify |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 17% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 32% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 28% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-21 12:55:33 UTC |
| Last Seen | 2026-08-12 16:03:23 UTC |
| Profile Built | 2026-08-12 16:17:56 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.