18.239.168.129
Intelligence Briefing: IP 18.239.168.129/32
The IP address was identified as an Amazon CloudFront edge node under Amazon.com, Inc. (ASN 16509). It was assigned a Low Risk reputation with a score of 20. The address was observed hosting HTTP and HTTPS services with a CloudFront banner.
Ownership attribution confirmed the address belonged to AMAZON-CF. DNS records pointed to server-18-239-168-129.bos50.r.cloudfront.net. Forward and reverse DNS resolution were confirmed. No known threat campaigns, blacklists, or abuse indicators were associated with the IP.
A geolocation contradiction was recorded during analysis. The address was geolocated to Boston, US, but Round Trip Time measurements recorded a 21 ms minimum latency against a physics-calculated minimum of 152.5 ms for the claimed distance of 7625.7 km. This invalidated the claimed physical location.
The associated /24 subnet was classified as mostly clean, though 20 sibling IPs were flagged as threats. The profile confidence was labeled Low due to signal contradictions. The recommended action was to Monitor the asset. Data freshness confirmed the profile was Live as of September 27, 2026.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.238.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-239-168-129.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-239-168-129.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-16 04:15:32 UTC |
| Last Seen | 2026-09-27 00:07:04 UTC |
| Profile Built | 2026-09-27 00:19:05 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 36 |
Full dossier details are available via our API.