18.161.30.177
Intelligence briefing for IP 18.161.30.177 identified the address as an Amazon Web Services CloudFront edge node under the ownership of Amazon.com, Inc. (ASN 16509) within the 18.160.0.0/15 CIDR block. DNS reverse resolution mapped the address to server-18-161-30-177.bos50.r.cloudfront.net, and the TLS certificate validated against the Amazon RSA 2048 M04 issuer for the cloudfront.net domain.
Technical observations recorded open TCP ports 80 and 443 for HTTP and HTTPS services. The server banner confirmed the CloudFront service identity. Threat analysis revealed no malicious activity indicators; the IP was unlisted on blacklists, and zero known campaigns were associated with the address. Behavioral metrics showed zero honeypot hits, enumeration strikes, or WAF violations.
A contradiction was recorded between the claimed Seattle, US geolocation and RTT physics measurements, which flagged a distance of approximately 7,883 km against a 15ms RTT. Despite the signal contradiction, the reputation assessment classified the IP as Low Risk with a risk score of 25. The recommendation was to monitor the address due to data inconsistencies, maintaining a low severity assessment.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.160.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-161-30-177.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-161-30-177.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.cloudfront.netcloudfront.net |
| Valid From | 2026-08-25T00:00:00+00:00 |
| Valid Until | 2027-03-10T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 015E89F2D093DD92CD82A78C09A033C6 |
| Thumbprint | 5E9C8C0323F32C16F1D3F82DAE8E8E2D88E96056 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 4 |
| reputation | 26% | 1 | 4 |
| geolocation | 27% | 2 | 4 |
| Overall | 28% | 10 | 23 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-30 03:04:00 UTC |
| Last Seen | 2026-09-21 16:42:35 UTC |
| Profile Built | 2026-09-21 16:52:59 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 42 |
Full dossier details are available via our API.