18.165.9.20
18.165.9.20 is an IPv4 address operated by AMAZON-02 - Amazon.com, Inc., US (AS16509), with approximate network location New York, United States. Its reverse DNS name is server-18-165-9-20.pit50.r.cloudfront.net. As of November 13, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.
Witness AI IP Assessment (AI-generated)
AI-generated assessment. Verify critical details independently.
The host 18.165.9.20/32 was observed responding to validation requests, confirming server availability. Intelligence indicates the address is owned by Amazon.com, Inc. (ASN 16509) within the AMAZON-CF netblock (18.164.0.0/15), registered in the United States. The network role is identified as a Web Server provided by Amazon Web Services, though specific infrastructure, connection, and service classifications remain unverified in current data. Geolocation data points to the United States with an approximate network location, while ownership records and routing information align with US-based Amazon infrastructure.
DNS hygiene checks for SPF, DMARC, CAA, DNSSEC, and FCR-DNS returned "not_checked" statuses with no evaluated data, resulting in an unassessed score. No TLS probes or endpoints were successfully interrogated, and the risk score is currently zero. Due to the absence of certificate data and unverified infrastructure flags, the connection type and specific service purpose cannot be definitively characterized beyond the web server designation. Corroboration of the web server role and verification of DNS security records are recommended.
🏢 Ownership & Registration
| Registered holder | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.164.0.0/15 |
| RIR | ARIN |
| Network registration country | United States |
| Routing operator | AMAZON-02 - Amazon.com, Inc., US |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-165-9-20.pit50.r.cloudfront.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
DNS Posture
Results describe the queried names. SPF, DMARC and CAA are domain policies, not requirements for every IP. DNSSEC here describes reverse DNS; inconclusive validation does not mean unsigned.
Not assessed: 0 conclusive IP DNS checks.
| caa | Not checked |
| spf | Not checked |
| dmarc | Not checked |
| dnssec | Not checked |
| fcrDns | Not checked |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS16509 |
| Network Prefix | 18.165.8.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Aging
| First Seen | 2026-10-25 23:04:37 UTC |
| Last Seen | 2026-11-14 12:15:53 UTC |
| Profile Built | 2026-11-13 06:50:49 UTC |
| Data Freshness | Aging |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 18.165.9.20
Who owns the IP address 18.165.9.20?
18.165.9.20 is registered to Amazon.com, Inc.. The address falls within the 18.164.0.0/15 network block. Registration is held at ARIN.
Where is 18.165.9.20 located?
Geolocation data places 18.165.9.20 in New York. IP geolocation is approximate, not a precise physical address. Registration country and certificate organization addresses do not establish service location.
Is 18.165.9.20 malicious or safe?
18.165.9.20 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 18.165.9.20?
The reverse DNS (PTR) record for 18.165.9.20 is server-18-165-9-20.pit50.r.cloudfront.net. This hostname is not forward-confirmed, so it should be treated as a weak signal.
What ports are open on 18.165.9.20?
Responsive ports observed on 18.165.9.20 include 80, 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.