13.33.74.60
Intelligence Briefing: IP 13.33.74.60/32
Analysis identified the address as a low-risk infrastructure node operated by Amazon.com, Inc. (ASN 16509, AMAZO-CF) within the 13.32.0.0/15 block. Network fingerprinting confirmed the server as Amazon CloudFront, responding on TCP ports 80 and 443 with valid TLS certificates for the cloudfront.net domain.
The asset carried a risk score of 25 (Low Risk) with zero blacklist entries and no known attacker campaigns. Behavioral analysis recorded no honeypot hits, enumeration strikes, or WAF violations. However, the system classification tags the host as "suspicious" due to signal contradictions, though no specific threat indicators were identified. A significant geolocation contradiction emerged during validation; the profile listed a physical distance of 5968.4km, yet measured RTT values averaged 21ms (minimum possible 119.4ms for that distance). The surrounding subnet was classified as "mostly_clean" with an abuse density of 11.54%.
Recommendation for the security operations center is to Monitor the IP with low severity. While the infrastructure is identified as legitimate CloudFront, the internal data contradictions and system classification warrant observation to confirm stability or identify future changes. Analysis confidence was rated as "Very Low" due to insufficient data regarding specific intent and the presence of signal contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-CF |
| CIDR Block | 13.32.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-13-33-74-60.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-13-33-74-60.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.cloudfront.netcloudfront.net |
| Valid From | 2026-08-25T00:00:00+00:00 |
| Valid Until | 2027-03-10T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 015E89F2D093DD92CD82A78C09A033C6 |
| Thumbprint | 5E9C8C0323F32C16F1D3F82DAE8E8E2D88E96056 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 37% | 2 | 6 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 4 |
| geolocation | 38% | 2 | 5 |
| Overall | 29% | 10 | 26 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-02 02:30:11 UTC |
| Last Seen | 2026-09-24 19:16:03 UTC |
| Profile Built | 2026-09-24 19:23:56 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 45 |
Full dossier details are available via our API.