IPDebrief

18.161.21.119

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

Intelligence Briefing: IP 18.161.21.119/32 was assessed with a Low Risk reputation score of 25. Ownership was attributed to Amazon.com, Inc. (AS16509) within the AMAZON-CF network block (18.160.0.0/15). Reverse DNS resolution identified the host as server-18-161-21-119.bos50.r.cloudfront.net, and service banners indicated CloudFront web server functionality on ports 80 and 443. The geolocation database listed the address in Washington, US, but RTT physics validation contradicted the claimed distance, noting a 16ms RTT against a minimum possible 157.7ms. No direct threat indicators, known campaigns, or blacklist listings were observed. Neighborhood analysis for the 18.161.21.0/24 subnet identified 14 threat siblings out of 101 active addresses. The control plane indicated valid RPKI and IRR consistency. Operational recommendation was to Monitor the address with Low severity due to signal contradictions.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionWashington
CitySeattle
Timezoneβ€”
Latitude47.61
Longitude-122.33

🏒 Ownership & Registration

OrganizationAmazon.com, Inc.
ASNAS16509
Network NameAMAZON-CF
CIDR Block18.160.0.0/15
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRserver-18-161-21-119.bos50.r.cloudfront.net
Forward ConfirmedYes β€” FCrDNS verified
Forward Hostnamesserver-18-161-21-119.bos50.r.cloudfront.net

πŸ” DNS Hygiene

Hygiene Score80% (Excellent)
SPF2/2 domains
DMARC2/2 domains
FCrDNSVerified
DNSSECNot signed
CAAPresent
Domains Checked2 domains

☁️ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierTier 2 β€” Moderate operator sophistication with routing hygiene
No specific classification

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
443httpstcpβ€”
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
ServerCloudFront
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
37%
26
routing
38%
45
services
38%
25
ownership
41%
35
reputation
32%
15
geolocation
27%
24
Overall35%1430
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) β€” 1 contradiction(s)
AttributionHigh (85%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-09-05 23:07:29 UTC
Last Seen2026-09-25 22:54:01 UTC
Profile Built2026-09-25 23:08:01 UTC
Data FreshnessLive
Signal Types33
Total Observations53
πŸ” 33 signal types Β· 53 observations collected
This report is generated from 33+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.