18.239.183.105
INTELLIGENCE BRIEFING: 18.239.183.105
Classification: Low Risk (Score: 25)
Timeframe: 2026-09-06 to 2026-09-14
Infrastructure Profile
The IP address 18.239.183.105 was attributed to Amazon.com, Inc. (ASN 16509) under the AMAZON-CF netname. Ownership data placed the address in Boston, US. DNS resolution confirmed the hostname server-18-239-183-105.bos50.r.cloudfront.net, and the service banner identified the host as CloudFront. Active ports included TCP/80 and TCP/443.
Threat and Behavioral Analysis
Observation history recorded zero known campaigns, threat indicators, or specific blacklist matches for the address. Behavioral analysis showed no honeypot hits, enumeration strikes, or WAF violations. Neighborhood data classified the subnet as mostly clean, though 12 threat siblings were identified among 90 total siblings. One DNSBL listing was recorded against 8 total lists.
Validation and Discrepancies
Geo-validation identified a contradiction between the claimed Boston location and RTT physics measurements, which recorded 12.0ms against a minimum theoretical requirement of 152.5ms. Attribution confidence was rated Moderate based on ownership and FCR DNS.
Recommendation
Analysts were advised to monitor the address due to signal contradictions despite low severity. The profile remained consistent with legitimate cloud infrastructure operations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 18.238.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-18-239-183-105.bos50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-18-239-183-105.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 37% | 2 | 6 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 4 |
| geolocation | 38% | 2 | 5 |
| Overall | 29% | 10 | 25 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-06 06:23:46 UTC |
| Last Seen | 2026-09-21 13:41:48 UTC |
| Profile Built | 2026-09-21 14:01:24 UTC |
| Data Freshness | Live |
| Signal Types | 28 |
| Total Observations | 49 |
Full dossier details are available via our API.