# 99.86.191.96 — IP Intelligence Summary

99.86.191.96 is an IPv4 address operated by Amazon.com, Inc. (AS16509), geolocated to Boston, United States. Its reverse DNS name is server-99-86-191-96.bos50.r.cloudfront.net. As of October 11, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/99.86.191.96
- Last updated: 2026-10-11

## Ownership

- Organization: Amazon.com, Inc.
- Network name: AMAZO-CF
- Allocated block: 99.86.0.0/16
- ASN: AS16509 (https://ipdebrief.com/asn/16509)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Boston
- Region: US-MA
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: Unknown
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- server-99-86-191-96.bos50.r.cloudfront.net
- Forward-confirmed: yes

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

IP address 99.86.191.96/32 was identified as a Web Server operated by Amazon.com, Inc., within the AMAZO-CF network block (99.86.0.0/16). The system opened TCP ports 80 and 443 and returned a CloudFront banner with DNS resolution confirming the cloudfront.net domain. Reputation analysis assigned a Low Risk status with a risk score of 25.

Operational observations indicated the IP was active between October 2 and October 11, 2026. Threat actor classification tagged the host as Suspicious due to signal contradictions, including a geolocation discrepancy where claimed Boston coordinates conflicted with RTT physics measurements showing a 7625km distance. The address appeared on one DNS blacklist out of eight total lists.

Neighborhood data classified the subnet as mixed with an abuse density of 0.2059 and seven threat siblings among 31 active addresses. Recommendations classified the risk as low with a monitor action due to present signal contradictions. No immediate blocking was indicated despite the threat actor tag.

## Nearby addresses

- 99.86.191.4 (https://ipdebrief.com/99.86.191.4)
- 99.86.191.8 (https://ipdebrief.com/99.86.191.8)
- 99.86.191.11 (https://ipdebrief.com/99.86.191.11)
- 99.86.191.18 (https://ipdebrief.com/99.86.191.18)
- 99.86.191.19 (https://ipdebrief.com/99.86.191.19)
- 99.86.191.23 (https://ipdebrief.com/99.86.191.23)
- 99.86.191.25 (https://ipdebrief.com/99.86.191.25)
- 99.86.191.26 (https://ipdebrief.com/99.86.191.26)
- 99.86.191.29 (https://ipdebrief.com/99.86.191.29)
- 99.86.191.33 (https://ipdebrief.com/99.86.191.33)
- 99.86.191.37 (https://ipdebrief.com/99.86.191.37)
- 99.86.191.41 (https://ipdebrief.com/99.86.191.41)

---

Source: IPDebrief, "99.86.191.96 IP intelligence", https://ipdebrief.com/99.86.191.96, updated 2026-10-11. Assessments are probabilistic.