3.168.73.71
Intelligence Briefing: 3.168.73.71/32
Ownership and Infrastructure:
The address was registered to Amazon.com, Inc. (ASN 16509) under the AMAZON-CF netname within the 3.168.0.0/14 block. DNS records confirmed the PTR hostname `server-3-168-73-71.jfk50.r.cloudfront.net` and forward resolution to the `cloudfront.net` domain. The server banner identified as "CloudFront," and open TCP ports 80 (HTTP) and 443 (HTTPS) were active.
Threat Assessment:
The asset held a risk score of 25, classified as Low Risk. No threat indicators, blacklist listings, or known campaigns were associated with the IP during the observation period. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations. The network role was classified as Hosting, with a service purpose of Web Server.
Anomalies and Contradictions:
Geolocation data placed the origin in New York, US. However, RTT physics measurements contradicted this claim, recording a round-trip time of 23ms against a minimum possible 152.5ms for the reported distance of 7,625.7km. This contradiction contributed to a "Very Low" confidence label regarding data sufficiency.
Recommendation:
SOC analysts were advised to monitor the asset due to signal contradictions, despite the current low severity rating. Data freshness remained live as of 2026-09-17.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZON-CF |
| CIDR Block | 3.168.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-3-168-73-71.jfk50.r.cloudfront.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server-3-168-73-71.jfk50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 4 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 33% | 2 | 5 |
| Overall | 27% | 10 | 25 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 08:57:20 UTC |
| Last Seen | 2026-09-26 08:14:12 UTC |
| Profile Built | 2026-09-26 08:32:23 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 50 |
Full dossier details are available via our API.