99.86.191.81
Analysts assessed IP 99.86.191.81 as a low-risk infrastructure node associated with Amazon Web Services. Ownership records attributed the address to Amazon.com, Inc. (AS16509) within the AMAZO-CF block. The endpoint operated as a CloudFront web server, presenting standard HTTP and HTTPS ports with valid TLS certificates for *.cloudfront.net. Threat intelligence feeds returned no known indicators of compromise, blacklist entries, or campaign associations. Risk scoring placed the IP at 20 with zero abuse confidence. However, technical validation noted a contradiction between the reported Boston geolocation and measured RTT physics. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations. Recommendations classified the severity as low and advised ongoing monitoring due to signal contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-CF |
| CIDR Block | 99.86.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server-99-86-191-81.bos50.r.cloudfront.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | server-99-86-191-81.bos50.r.cloudfront.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | CloudFront |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.cloudfront.netcloudfront.net |
| Valid From | 2026-08-25T00:00:00+00:00 |
| Valid Until | 2027-03-10T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 015E89F2D093DD92CD82A78C09A033C6 |
| Thumbprint | 5E9C8C0323F32C16F1D3F82DAE8E8E2D88E96056 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-18 05:08:54 UTC |
| Last Seen | 2026-09-25 20:04:52 UTC |
| Profile Built | 2026-09-25 20:15:15 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 34 |
Full dossier details are available via our API.