108.139.29.37
Intelligence Briefing: 108.139.29.37/32
The target IP was identified as a low-risk infrastructure asset associated with Amazon CloudFront (Netname: AMAZON-CF, ASN: 16509). Ownership records confirmed attribution to Amazon.com, Inc. within the ARIN registry.
Network analysis revealed standard web services operating on TCP ports 80 and 443. DNS records were forward confirmed to the cloudfront.net domain, and PTR resolution linked the address to the server-108-139-29-37.jfk50.r.cloudfront.net hostname. Email authentication controls were active, with SPF and DMARC records present.
Threat indicators remained absent. The address was not listed on blacklists, and behavioral logs showed no honeypot strikes, WAF violations, or known attacker activity. The overall risk score was 25 (Low Risk), and the IP was classified as "clean" within its subnet neighborhood.
However, control plane data indicated a geolocation contradiction. While the consensus location was New York, United States, RTT physics measurements contradicted this claim. Consequently, the profile confidence level was rated low.
Recommendation: SOC teams were advised to monitor the asset for behavioral changes. Despite the low-risk classification and lack of active threat indicators, the signal contradictions warrant continued observation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 108.138.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-108-139-29-37.jfk50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-108-139-29-37.jfk50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 2 — Moderate operator sophistication with routing hygiene |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 63% | 4 | 5 |
| services | 27% | 2 | 3 |
| ownership | 36% | 3 | 4 |
| reputation | 13% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 31% | 14 | 19 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 22:59:00 UTC |
| Last Seen | 2026-09-19 02:08:12 UTC |
| Profile Built | 2026-09-19 02:35:25 UTC |
| Data Freshness | Live |
| Signal Types | 31 |
| Total Observations | 39 |
Full dossier details are available via our API.