18.161.34.116
IP 18.161.34.116 was profiled as a cloud infrastructure endpoint owned by Amazon.com, Inc. (ASN 16509) within the 18.160.0.0/15 block. The address resolved to Seattle, Washington, and operated as a Web Server on the CloudFront network. Services included HTTP on port 80 and HTTPS on port 443, with server banners confirming CloudFront identity and forward DNS resolution verified.
Reputation analysis rated the asset as Low Risk with a score of 25. Threat actor classification flagged the host as "Suspicious Host" with moderate attribution confidence, and one DNSBL listing was recorded against the control plane. Behavioral analysis showed no active attacker status, spam source activity, or known campaign associations. DNS hygiene was rated excellent with valid SPF and DMARC records.
SOC analysts were advised to monitor the traffic due to low-grade risk indicators, though the overall severity remained low. No evidence of persistent malicious activity, honeypot hits, or WAF violations was observed.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.160.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-161-34-116.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-161-34-116.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 27% | 2 | 2 |
| Overall | 21% | 9 | 12 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-13 14:48:14 UTC |
| Last Seen | 2026-09-21 18:26:55 UTC |
| Profile Built | 2026-09-21 18:34:21 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 30 |
Full dossier details are available via our API.