18.161.21.25
Intelligence Briefing: 18.161.21.25
The endpoint 18.161.21.25 was categorized as low risk with an overall risk score of 20. Ownership records identified the address as belonging to Amazon.com, Inc. (ASN 16509) under the netname AMAZON-CF within the CIDR block 18.160.0.0/15. DNS resolution returned the hostname server-18-161-21-25.bos50.r.cloudfront.net within the cloudfront.net domain. Network scans confirmed TCP ports 80 and 443 were open, with the server banner identifying the service as CloudFront.
No threat indicators, blacklists, or known campaigns were associated with the address. The abuse confidence score was null, and the neighborhood classification remained mostly clean with an abuse density of 0.0658. Geolocation data for the United States contradicted RTT physics measurements, registering a violation against minimum possible RTT values for the reported distance. Assessment concluded with a recommendation to monitor due to signal contradictions, though the address was not flagged as persistently malicious.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.160.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-161-21-25.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-161-21-25.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 38% | 2 | 5 |
| Overall | 25% | 10 | 18 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-30 00:18:19 UTC |
| Last Seen | 2026-09-21 15:54:13 UTC |
| Profile Built | 2026-09-21 16:00:26 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 39 |
Full dossier details are available via our API.