13.33.74.157
IP 13.33.74.157 functioned as an Amazon CloudFront web server (AS16509) owned by Amazon.com, Inc. within the `13.32.0.0/15` CIDR block. The resource registered a Risk Score of 25, categorized as Low Risk, with no specific threat indicators or known attacker associations. DNS records resolved the IP to `server-13-33-74-157.bos50.r.cloudfront.net`, and open ports 80 and 443 presented CloudFront server banners with valid TLS certificates for `*.cloudfront.net`.
Operational anomalies included a geolocation contradiction where the claimed New York, US location conflicted with RTT physics measurements (15ms RTT vs. 5968.4km distance). Control plane data indicated route instability within the `13.33.74.0/23` prefix and a DNSBL listing count of one against eight total lists. Although the neighborhood classification was mostly clean, eight threat siblings existed within the `13.33.74.157/24` subnet. System classification labeled the host as a "Suspicious Host" with unknown intent due to signal contradictions.
The recommended action was to Monitor the asset with low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-CF |
| CIDR Block | 13.32.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-13-33-74-157.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-13-33-74-157.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.cloudfront.netcloudfront.net |
| Valid From | 2026-08-25T00:00:00+00:00 |
| Valid Until | 2027-03-10T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 015E89F2D093DD92CD82A78C09A033C6 |
| Thumbprint | 5E9C8C0323F32C16F1D3F82DAE8E8E2D88E96056 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 14% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-09 03:11:11 UTC |
| Last Seen | 2026-09-23 00:47:45 UTC |
| Profile Built | 2026-09-23 01:17:40 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.