18.161.34.6
Intelligence analysts classified IP 18.161.34.6 as a low-risk endpoint with a risk score of 20. Ownership records linked the address to Amazon.com, Inc. (ASN 16509) within the 18.160.0.0/15 block, identifying it as an Amazon CloudFront web server. Network scanning revealed open TCP ports 80 and 443 with a "CloudFront" server banner. DNS analysis confirmed forward resolution to `cloudfront.net` and PTR records to `server-18-161-34-6.bos50.r.cloudfront.net`.
Threat indicators remained empty with zero blacklist hits and no known campaign associations. DNS hygiene was rated excellent, featuring valid SPF and DMARC configurations. Geolocation validation reported a contradiction where the claimed distance of 7,883.3 km conflicted with an RTT measurement of 13.0 ms against a minimum possible threshold of 157.7 ms. The subnet 18.161.34.6/24 was classified as clean with an abuse density of 0.1081.
Recommendations advised monitoring the asset due to signal contradictions, despite the overall classification of low severity and standard web server functionality.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.160.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-161-34-6.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-161-34-6.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 4 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 33% | 2 | 5 |
| Overall | 27% | 10 | 24 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-05 05:35:42 UTC |
| Last Seen | 2026-09-21 02:55:49 UTC |
| Profile Built | 2026-09-21 03:04:49 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 48 |
Full dossier details are available via our API.