18.161.34.65
Infrastructure analysis identified IP 18.161.34.65 as a Web Server associated with Amazon.com, Inc. (AS16509) under the AMAZON-CF network. The host exposed HTTP on port 80 and HTTPS on port 443, resolving to server-18-161-34-65.bos50.r.cloudfront.net.
Threat intelligence assigned a Low Risk reputation with a risk score of 25. No known campaigns, honeypot hits, or enumeration strikes were recorded during observation periods between September 8 and September 16, 2026. The IP was not flagged as a known attacker or Tor exit node, though it appeared on one DNS blacklist among eight total lists.
Geolocation data indicated the US, Washington, region, though RTT measurements (15ms average) contradicted the claimed distance (7883km), flagging a geolocation inconsistency. The surrounding subnet (18.161.34.65/24) was classified as clean with three threat siblings detected among sixty-five active siblings.
Due to signal contradictions and the presence of threat indicators without specific classification, the recommended action is Monitor with low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.160.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-161-34-65.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-161-34-65.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-08 21:48:56 UTC |
| Last Seen | 2026-09-16 05:22:43 UTC |
| Profile Built | 2026-09-16 05:33:57 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 36 |
Full dossier details are available via our API.