18.173.29.90
Intelligence Briefing: 18.173.29.90/32
The IP address 18.173.29.90 was identified as a Low Risk endpoint belonging to Amazon.com, Inc. (ASN 16509) within the AMAZON-CF network. Observations confirmed the address as part of the 18.173.29.0/24 block located in the United States.
Infrastructure analysis indicated the endpoint served as a Web Server via Amazon Web Services. DNS records resolved forward and backward to the domain `cloudfront.net`, specifically `server-18-173-29-90.doh50.r.cloudfront.net`. Active services included HTTP (port 80) and HTTPS (port 443), with a TLS certificate issued by Amazon RSA 2048 M04 for `*.cloudfront.net`. Server banners identified the service as CloudFront.
Threat assessment revealed zero known threat indicators, blacklist entries, or abuse reports. The neighborhood classification was marked clean with an abuse density of 0. DNS hygiene was rated Excellent with valid SPF and DMARC records.
The profile recommendation was to Allow traffic with info-level severity, noting forward-confirmed reverse DNS as a legitimate endpoint. The most recent signal was observed on 2026-09-21.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.172.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-173-29-90.doh50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-173-29-90.doh50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.cloudfront.netcloudfront.net |
| Valid From | 2026-08-25T00:00:00+00:00 |
| Valid Until | 2027-03-10T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 015E89F2D093DD92CD82A78C09A033C6 |
| Thumbprint | 5E9C8C0323F32C16F1D3F82DAE8E8E2D88E96056 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-21 14:59:51 UTC |
| Last Seen | 2026-09-21 14:59:51 UTC |
| Profile Built | 2026-09-21 15:06:35 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.