18.161.34.115
Intelligence Briefing: 18.161.34.115/32
Identity and Ownership
The address belongs to Amazon.com, Inc. (ASN 16509), registered under the netname AMAZON-CF. The infrastructure functions as an Amazon Web Services Web Server, specifically identified as Amazon CloudFront CDN.
Technical Profile
* DNS Records: Forward resolution confirmed to server-18-161-34-115.bos50.r.cloudfront.net (cloudfront.net).
* Active Services: TCP Port 80 (HTTP) and TCP Port 443 (HTTPS).
* Geolocation: Seattle, WA, US.
* Email Hygiene: Domain maintains excellent DNS hygiene with SPF, DMARC, and CAA records present.
Threat Assessment
* Reputation: Low Risk (Risk Score: 20).
* Malicious Activity: No known campaigns, attacker indicators, or spam sources were identified. The IP is not listed on any known blacklists (Blacklist Count: 0).
* Behavior: No threat persistence observed. The IP is not flagged as a known attacker or Tor exit node.
Anomalies and Contradictions
* RTT Discrepancy: A contradiction exists between the claimed geolocation (Seattle, US) and RTT physics measurements. The measured distance implied a location approximately 7,883 km away from the probe origin, violating minimum possible RTT expectations for the reported location.
* Confidence: Overall data confidence is rated very low due to the RTT contradiction.
Recommendation
* Action: Monitor (Low Severity).
* Rationale: Signal contradictions are present. While the asset is a known legitimate CDN provider with no active threat indicators, the geolocation inconsistency warrants observation for changes in behavior or routing patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.160.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-161-34-115.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-161-34-115.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-21 07:19:15 UTC |
| Last Seen | 2026-09-21 07:19:15 UTC |
| Profile Built | 2026-09-21 07:35:16 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 20 |
Full dossier details are available via our API.