The target IP 98.82.154.81 was identified as a low-risk resource with a risk score of 25. Ownership records indicated Amazon Data Services Northern Virginia (ASN 14618) based in Ashburn, Virginia, within the 98.80.0.0/13 CIDR block. Reverse DNS resolution mapped the address to ec2-98-82-154-81.compute-1.amazonaws.com, confirming association with the amazonaws.com domain. Network services revealed active HTTP (80) and HTTPS (443) connections secured by an Amazon RSA 2048 M04 TLS certificate for msh.amazon.com.
Threat analysis showed no active indicators, blacklist listings, or known campaign associations. Despite the low-risk classification, the address resided in a subnet (98.82.154.81/24) with mixed abuse density (0.3333) and two threat siblings. Behavioral analysis reported no WAF violations or enumeration strikes, though attribution confidence remained moderate at 70% with insufficient data to classify specific intent
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS14618 |
| Network Name | AMAZON-IAD |
| CIDR Block | 98.80.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-98-82-154-81.compute-1.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-98-82-154-81.compute-1.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Server |
| HTTP Title | β |
π TLS Certificate
| SANs | msh.amazon.com |
| Valid From | 2026-08-10T00:00:00+00:00 |
| Valid Until | 2027-02-23T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 0FC510C83895E58A075CE9F1047D6B0B |
| Thumbprint | 1B705B90E5E97F23738DA50DB70498FF774D1274 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 29% | 2 | 4 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 3 |
| Overall | 26% | 10 | 21 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-09 07:59:58 UTC |
| Last Seen | 2026-09-18 20:37:25 UTC |
| Profile Built | 2026-09-18 20:49:21 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 36 |
Full dossier details are available via our API.