13.33.74.145
Intelligence assessment of 13.33.74.145 identified the address as an Amazon CloudFront endpoint owned by Amazon.com, Inc. (AS16509). The host operated standard web services on ports 80 and 443 with valid Amazon TLS certificates. The system maintained a Low Risk reputation score of 25.
Observation history indicated a conflict between geolocation data and network physics. While records placed the host in New York, US, round-trip time measurements violated minimum possible latency for that distance. The local subnet, 13.33.74.0/24, exhibited an abuse density of 0.1304 with nine active threat siblings among 67 active peers. Control plane analysis recorded one DNS blacklist listing.
Behavioral analysis showed no active attacker status or WAF violations. Despite the legitimate infrastructure role, the threat actor classification was marked as Suspicious Host due to signal contradictions. Analysts recommended monitoring the address for potential changes given the inconsistencies between geolocation claims and physical network measurements.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-CF |
| CIDR Block | 13.32.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-13-33-74-145.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-13-33-74-145.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.cloudfront.netcloudfront.net |
| Valid From | 2026-08-25T00:00:00+00:00 |
| Valid Until | 2027-03-10T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 015E89F2D093DD92CD82A78C09A033C6 |
| Thumbprint | 5E9C8C0323F32C16F1D3F82DAE8E8E2D88E96056 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 33% | 2 | 4 |
| reputation | 32% | 1 | 5 |
| geolocation | 33% | 2 | 5 |
| Overall | 31% | 10 | 26 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-08 11:23:58 UTC |
| Last Seen | 2026-09-24 21:41:12 UTC |
| Profile Built | 2026-09-24 21:50:37 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 45 |
Full dossier details are available via our API.