98.80.4.33📋 Copy

# IP INTELLIGENCE BRIEFING: 98.80.4.33/32

Classification: Low Risk | Owner: Amazon Web Services | Date: 2026-06-16

## Executive Summary

IP 98.80.4.33 is a cloud infrastructure address assigned to Amazon Web Services (AS14618) in Ashburn, Virginia. The IP maintains a low-risk profile (score: 25) with no active threat indicators. However, the associated subnet shows elevated neighbor activity, and the IP is listed on 8 threat feeds with 1 listing at high severity.

## Technical Profile

• Organization: Amazon Data Services Northern Virginia (AMAZON-IAD)
• CIDR Block: 98.80.0.0/13
• Geolocation: Ashburn, VA, US (39.05°N, -77.49°W)
• Infrastructure Type: CloudCompute (AWS)
• DNS Resolution: scanner-98-80-4-33.reposify.net
• PTR Hostname: scanner-98-80-4-33.reposify.net
• Network Role: Firewalled / No Services (No open ports detected)

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Blacklist Status: Listed on 8 DNS blacklists (1 listing at high severity)
• Known Threats: None detected in active threat feeds
• Tor Exit: No
• Known Attacker: No
• Spam Source: No

## Neighborhood Analysis (98.80.4.0/24)

• Total Neighbors: 14 IPs in /24 subnet
• Abuse Density: 0%
• Risk Distribution: 0 high-risk, 13 medium-risk, 1 low-risk
• Notable Neighbors:

- 98.80.4.15 (risk: 50, authority: 60)

- 98.80.4.31 (risk: 40, authority: 60)

- 98.80.4.40 (risk: 40, authority: 60)

## Historical Observation

Fifteen observations recorded over the monitoring period. Recent signals include:

• DNSSEC validation: Valid
• ASN attribution: AS14618 (AMAZON-AES)
• Threat persistence: None detected
• Listing activity: Multiple blacklist entries with high-severity listing present

## Relationship Graph

• Same Network: AMAZON-IAD (2 entries)
• DNS Association: scanner-98-80-4-33.reposify.net

## Recommended Actions

No specific firewall rules or blocking recommendations generated. The IP's low-risk classification and cloud infrastructure nature suggest legitimate AWS usage. However, the hostname pattern ("scanner-") and blacklist presence warrant monitoring.

## Analyst Notes

This IP appears to be AWS cloud infrastructure with a scanner hostname. While the IP itself is low-risk, the subnet context shows 13 of 14 neighboring IPs at medium risk (score 40-50). The combination of AWS infrastructure, scanner hostname, and blacklist presence suggests this may be automated scanning infrastructure. Monitor for lateral activity within the 98.80.4.0/24 subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.