18.239.168.73
Intelligence Briefing: 18.239.168.73/32
Infrastructure Profile
The IP address 18.239.168.73 was assigned to Amazon.com, Inc. (ASN 16509) within the AMAZON-CF CIDR block (18.238.0.0/15). Forward DNS resolution confirmed ownership by the CloudFront service, resolving to `server-18-239-168-73.bos50.r.cloudfront.net`.
Threat Assessment
The address maintained a Low Risk reputation with a risk score of 25. No active threat indicators, blacklist listings, or known attacker classifications were observed. Behavioral logs showed no enumeration strikes or WAF violations.
Data Validation
Geolocation validation flagged a contradiction between the claimed Boston, MA location and RTT physics measurements, which indicated the geolocation was implausible. DNS hygiene scored 80 with valid SPF and DMARC records in place.
Recommendation
Analysis indicated a need to monitor the address for changes due to conflicting geolocation data, though the immediate threat severity remained low. No firewall rules were required at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.238.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-239-168-73.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-239-168-73.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 32% | 1 | 5 |
| geolocation | 27% | 2 | 4 |
| Overall | 29% | 10 | 24 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-03 06:49:42 UTC |
| Last Seen | 2026-09-21 02:31:38 UTC |
| Profile Built | 2026-09-21 02:43:18 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 43 |
Full dossier details are available via our API.