IPDebrief

162.254.192.5

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP address 162.254.192.5 was attributed to Valve Corporation (ASN 32590) within the 162.254.192.0/21 network block registered in Ashburn, VA. The host functioned as a Web Server running nginx/1.29.8, serving HTTP and HTTPS with a TLS certificate issued by Let's Encrypt for cache5-iad1.steamcontent.com. DNS configurations included valid SPF and DMARC records.

The asset carried a Low Risk reputation score of 20 with zero blacklist hits and no known campaign associations. Behavioral monitoring showed no incidents, enumeration strikes, or honeypot hits. Despite the benign service profile, the associated /24 subnet displayed a mixed classification with eight threat siblings and an abuse density of 0.3077. Geolocation validation identified a contradiction between claimed location and RTT physics measurements, yielding a Very Low overall profile confidence of 0.1667.

Analysts were advised to Monitor the asset due to signal contradictions, assigned a low severity rating.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionVirginia
CityAshburn
Timezoneβ€”
Latitude39.02
Longitude-77.54

🏒 Ownership & Registration

OrganizationValve Corporation
ASNAS32590
Network NameVALVE-V4-6
CIDR Block162.254.192.0/21
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR162-254-192-5.valve.net
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnames162-254-192-5.valve.net

πŸ” DNS Hygiene

Hygiene Score60% (Good)
SPF3/3 domains
DMARC3/3 domains
FCrDNSNot verified
DNSSECNot signed
CAAPresent
Domains Checked3 domains

☁️ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierUnknown β€” Insufficient routing data to classify
No specific classification

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
443httpstcpβ€”
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
Servernginx/1.29.8
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
CN=cache5-iad1.steamcontent.com
Issued by CN=YE2, O=Let's Encrypt, C=US
Self-signed: No
SANscache5-iad1.steamcontent.com
Valid From2026-07-31T20:42:42+00:00
Valid Until2026-10-29T20:42:41+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_128_GCM_SHA256
Signature Algorithmsha384ECDSA
Validity Period89 days
Serial Number050E3B075E308B659BB4B16DED7F6DE7BBA2
Thumbprint3170329547CEDE389FD68E6DD77774B4652492D0

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
27%
23
routing
13%
11
services
33%
24
ownership
27%
23
reputation
13%
12
geolocation
42%
23
Overall26%1016
Coverage: 4/6 dimensions Β· Data sufficiency: partial
Data CoherenceMostly Consistent (80%) β€” 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-09-08 20:41:55 UTC
Last Seen2026-09-25 07:44:51 UTC
Profile Built2026-09-25 07:53:48 UTC
Data FreshnessLive
Signal Types24
Total Observations33
πŸ” 24 signal types Β· 33 observations collected
This report is generated from 24+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.