18.239.168.18
Subject: Intelligence Briefing for IP 18.239.168.18
Ownership and Role
The address was owned by Amazon.com, Inc. (ASN 16509) under the organization name AMAZON-CF. Infrastructure records identified the role as a Web Server within the CloudFront service. DNS resolution confirmed the hostname server-18-239-168-18.bos50.r.cloudfront.net.
Traffic and Services
Open ports observed included TCP/80 (HTTP) and TCP/443 (HTTPS). Server banners identified the service as CloudFront. No honeypot hits, WAF violations, or enumeration strikes were detected.
Risk and Geolocation
The overall reputation was Low Risk with a risk score of 20. The immediate /24 neighborhood was classified as mostly_clean, containing five threat siblings. Geolocation data indicated Boston, US, but this was contradicted by RTT physics measurements. A violation was recorded where the measured RTT (15.4ms) was significantly lower than the minimum possible RTT (152.5ms) for the claimed distance.
Recommendations
The recommendation was Monitor. The severity was low. Data freshness indicated the profile was Live with the newest observation on 2026-09-15.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.238.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-239-168-18.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-239-168-18.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 4 |
| geolocation | 43% | 2 | 5 |
| Overall | 28% | 10 | 22 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-08 03:33:13 UTC |
| Last Seen | 2026-09-24 10:33:09 UTC |
| Profile Built | 2026-09-24 10:46:11 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 44 |
Full dossier details are available via our API.