98.90.43.197
# IP Intelligence Briefing: 98.90.43.197
## Executive Summary
Target 98.90.43.197 is a moderate-risk (65/100) AWS EC2 infrastructure IP in Ashburn, VA with conflicting threat indicators. While the IP resolves to legitimate Amazon Web Services infrastructure, it has been observed on multiple threat feeds and blacklists. The /24 subnet shows no abuse density, suggesting localized activity.
## Ownership & Geolocation
- ASN: 14618 (Amazon Data Services Northern Virginia)
- Netname: AMAZON-IAD
- CIDR Block: 98.88.0.0/13
- Location: Ashburn, VA, United States (39.05°N, -77.49°W)
- Hostname: ec2-90-43-197.compute-1.amazonaws.com
- Infrastructure Type: AWS EC2 Instance
## Threat Profile
- Risk Score: 65/100 (Moderate Risk)
- Abuse Confidence: Not directly scored
- DNSBL Listings: 3 of 8 total blacklist lists
- Known Campaigns: None identified
- Threat Persistence: 0 days observed
## Historical Activity (Last 15 Observations)
Recent signal history reveals mixed indicators:
- Infrastructure Signals: Confirmed AWS ownership, ARIN registration, valid PTR records
- Threat Signals: Alienvault OTX correlation (50 pulse matches), high-severity blacklist listings
- Temporal Pattern: Observations cluster within minutes, indicating active monitoring
## Network Context
- Subnet: 98.90.43.197/24
- Abuse Density: 0% (clean classification)
- Threat Siblings: 0
- Active Siblings: 0
- Related Hostnames: ec2-90-43-197.compute-1.amazonaws.com
## Recommended Actions
- Allow (AWS infrastructure with moderate risk)
- Monitor for outbound connections from EC2 instance
- Block if specific threat indicators (malware command/control, spam sources) are confirmed
- Investigate blacklist listings to determine if false positives or legitimate abuse
## Analyst Notes
This IP represents AWS infrastructure that has been flagged by external threat feeds. The moderate risk score (65) combined with 3 DNSBL listings warrants monitoring but does not justify immediate blocking. The clean subnet environment (0% abuse density) suggests the activity is isolated to this single host. Continue monitoring for changes in behavior or additional threat correlations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS14618 |
| Network Name | AMAZON-IAD |
| CIDR Block | 98.88.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-98-90-43-197.compute-1.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-98-90-43-197.compute-1.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Multi-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 443, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 45% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 40% | 2 | 3 |
| ownership | 35% | 2 | 3 |
| reputation | 36% | 1 | 3 |
| geolocation | 17% | 1 | 1 |
| Overall | 31% | 9 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-05 06:12:47 UTC |
| Last Seen | 2026-08-13 07:27:37 UTC |
| Profile Built | 2026-08-13 07:38:39 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.