18.238.55.48
Intelligence profile for IP 18.238.55.48/32 indicates ownership by Amazon.com, Inc. (AS16509) within the AMAZON-CF block. The endpoint operates as a CloudFront web server, resolving to server-18-238-55-48.jfk52.r.cloudfront.net and serving traffic on ports 80 and 443. Reputation analysis rated the address Low Risk with a score of 25.
Technical contradictions emerged during control plane analysis, where claimed geolocation in New York, US, contradicted RTT physics measurements recording 22ms against a theoretical minimum of 152.5ms for the reported distance. Control plane data noted one DNSBL listing out of eight total checks, while neighborhood analysis classified the /24 subnet as mostly clean with low abuse density (0.0833).
Despite the low risk score, the address was classified as a Suspicious Host due to the presence of threat indicators without specific campaign correlation. Operational status remains live as of September 2026. Recommendations advise monitoring the address due to signal contradictions, maintaining a low severity posture.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.238.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-238-55-48.jfk52.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-238-55-48.jfk52.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 4 |
| geolocation | 33% | 2 | 5 |
| Overall | 28% | 10 | 23 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 17:28:01 UTC |
| Last Seen | 2026-09-25 13:23:41 UTC |
| Profile Built | 2026-09-25 13:36:09 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 43 |
Full dossier details are available via our API.