IP 13.192.128.134/32 presented a Low Risk reputation with a risk score of 25. Ownership records linked the address to Amazon Data Services Japan (AS16509) within the 13.192.0.0/16 block. Geolocation data assigned the location to Tokyo, Japan, though geo validation flagged country signal contradictions.
Network analysis classified the host as a Web Server on AWS infrastructure. Port 443 remained open for HTTPS traffic, and DNS PTR records resolved to ec2-13-192-128-134.ap-northeast-1.compute.amazonaws.com. TLS certificate inspection identified an issuer associated with Samsung HRM_SSM Primary Root CA. Behavioral metrics showed zero incidents, honeypot hits, or WAF violations, while control plane data indicated the IP was listed on one DNS blacklist out of eight total lists.
Confidence assessment labeled data sufficiency as Very Low (0.225) with a Coherence score of 68 (Mixed Signals). Recommendations advised monitoring the address due to signal contradictions. Data freshness indicated a Live status with the newest observation recorded on 2026-09-18.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Amazon Data Services Japan |
| ASN | AS16509 |
| Network Name | AMAZON-NRT |
| CIDR Block | 13.192.0.0/16 |
| RIR | ARIN |
| Country | Japan |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | ec2-13-192-128-134.ap-northeast-1.compute.amazonaws.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | ec2-13-192-128-134.ap-northeast-1.compute.amazonaws.com |
๐ DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | โ |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | *.samsunghrm.comlocalhost127.0.0.1 |
| Valid From | 2018-08-08T02:06:36+00:00 |
| Valid Until | 2048-07-31T02:06:36+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 10950 days |
| Serial Number | 00D5D3DFC69D30EFC6 |
| Thumbprint | 167FBA5653F787D5092C6FEAC3879D24B4CAF82F |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 22% | 6 | 7 |
| Data Coherence | Mixed Signals (68%) โ 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
โ TLS certificate claims KR but primary geo says JP
๐ Observation Timeline ๐ Live
| First Seen | 2026-09-18 11:36:45 UTC |
| Last Seen | 2026-09-18 11:36:45 UTC |
| Profile Built | 2026-09-18 11:56:37 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 25 |
Full dossier details are available via our API.