18.161.21.45
The IP address 18.161.21.45 was identified as a web server operating under Amazon.com, Inc. within the AMAZON-CF network block (18.160.0.0/15). Ownership records confirmed the asset as Amazon Web Services infrastructure, resolving to a cloudfront.net domain with valid SPF and DMARC authentication.
The profile assigned a low-risk reputation score of 15, and the neighborhood classification remained mostly clean. Technical scans detected open ports 80 and 443, with service banners indicating CloudFront. However, analysis revealed a geolocation contradiction where the claimed Seattle, Washington location conflicted with measured RTT physics indicating a distance of 7883.3km.
While behavioral logs showed no enumeration strikes or known attacks, the threat actor classification flagged the host as "Suspicious Host" with a very low confidence score of 0.1833. Recommendations advised monitoring actions due to signal contradictions, despite the intent classification being legitimate infrastructure.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.160.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-161-21-45.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-161-21-45.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 2 — Moderate operator sophistication with routing hygiene |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 7 |
| routing | 30% | 3 | 4 |
| services | 27% | 2 | 4 |
| ownership | 30% | 3 | 4 |
| reputation | 32% | 1 | 5 |
| geolocation | 33% | 2 | 5 |
| Overall | 32% | 13 | 29 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-05 02:56:13 UTC |
| Last Seen | 2026-09-24 14:43:17 UTC |
| Profile Built | 2026-09-24 14:52:12 UTC |
| Data Freshness | Live |
| Signal Types | 31 |
| Total Observations | 53 |
Full dossier details are available via our API.