## IP Intelligence Briefing: 54.157.204.245/32
Classification: Low Risk Infrastructure (AWS EC2)
Risk Score: 20/100
Report Date: 2026-07-30
Executive Summary
IP 54.157.204.245 is a low-risk Amazon Web Services (AWS) EC2 instance with no malicious indicators. The asset operates as a web server infrastructure with standard HTTP/HTTPS services and shows no correlation with known threat campaigns or abuse patterns.
Infrastructure Profile
- Organization: Amazon Technologies Inc.
- ASN: 14618 (AMAZON)
- Location: Ashburn, Virginia, US
- Network Range: 54.144.0.0/12
- Service Role: Web Server (AWS ELB)
- DNS Resolution: ec2-54-157-204-245.compute-1.amazonaws.com
- Associated Domain: medei.com.br (via TLS certificate)
Threat Assessment
- Reputation: Clean
- Blacklist Status: Not listed (0 entries)
- Threat Indicators: None detected
- Known Campaigns: None correlated
- Abuse Confidence Score: Not applicable
- Tor/Proxy Status: False
Network Environment
- Subnet Abuse Density: 0 (clean)
- Threat Siblings: 0
- Neighborhood Classification: Clean
- Route Stability: Unstable (isRouteStable: false)
Service Observations
- Open Ports: 80 (HTTP), 443 (HTTPS)
- TLS Certificate: Amazon RSA 2048 M04, issued for *.medei.com.br
- Server Banner: awselb/2.0
- HTTP Version: 2.0
- Status Code: 404 (last observed)
- SSL/TLS: TLS 1.3 with AES-128-GCM cipher suite
Temporal Analysis
- Observation Count: 21 signals over monitoring period
- Threat Persistence: None observed
- Ownership Changes: 0
- Last Updated: 2026-07-30T13:45:24
Security Recommendations
No immediate security actions required. The IP represents standard AWS infrastructure with no malicious activity detected. Standard monitoring practices apply. No firewall rules recommended due to low risk profile.
SOC Action: Monitor as routine cloud infrastructure. No escalation required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS14618 |
| Network Name | AMAZON |
| CIDR Block | 54.144.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-54-157-204-245.compute-1.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-54-157-204-245.compute-1.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 1/2 domains |
| DMARC | 1/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | awselb/2.0 |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 35% | 2 | 4 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 27% | 10 | 18 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-27 15:46:59 UTC |
| Last Seen | 2026-08-12 21:45:08 UTC |
| Profile Built | 2026-08-12 21:50:06 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.