18.160.46.56
Intelligence Briefing: 18.160.46.56/32
Infrastructure and Ownership
The IP address 18.160.46.56 was attributed to Amazon.com, Inc. (AS16509) within the AMAZON-CF network block (18.160.0.0/15). DNS records resolved to the domain cloudfront.net with the PTR hostname server-18-160-46-56.iad55.r.cloudfront.net. Active services were identified on TCP ports 80 and 443, with the HTTP server banner reporting as CloudFront.
Threat Reputation and Risk
The asset maintained a Low Risk reputation with a risk score of 20. No known campaigns, threat feed indicators, or active attacker signatures were associated with the address. Enumeration of blacklists returned zero matches, and the neighborhood analysis classified the subnet as clean with no threat siblings.
Observations and Anomalies
Geolocation data placed the asset in Seattle, United States. However, control plane analysis recorded a contradiction between the claimed geolocation and RTT physics measurements, noting a distance of 7,883km against an observed RTT of 28ms. Email authentication standards were met (SPF and DMARC present), but DNSSEC validation was absent.
Recommendation
The profile recommended a monitoring stance due to signal contradictions present in the control plane data. No immediate defensive action, such as blocking, was advised.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.160.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-160-46-56.iad55.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-160-46-56.iad55.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-25 01:22:06 UTC |
| Last Seen | 2026-09-25 01:22:06 UTC |
| Profile Built | 2026-09-25 01:35:50 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 20 |
Full dossier details are available via our API.