32.197.3.103
Analysis of IP 32.197.3.103 identified the address as part of Amazon.com, Inc. infrastructure (ASN 14618) located in Ashburn, VA. Reputation scoring returned a Low Risk rating (Score: 20) with zero blacklist listings and no known malicious indicators. Network traffic observed on ports 80 and 443 was associated with an AWS Elastic Load Balancer banner. TLS inspection confirmed a certificate issued for '*.us-east-1.prod.klei.com'.
Behavioral monitoring detected no enumeration strikes, honeypot hits, or WAF violations. Geolocation data indicated a distance of 6312.5 km from the probe, yet the measured RTT was 26.0 ms, contradicting the minimum possible RTT of 126.2 ms for the reported distance. DNS hygiene was rated Good (SPF and DMARC present), though HTTP security headers were missing. Overall profile confidence was Very Low due to limited signal coverage. The operational recommendation is to Monitor the IP for changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS14618 |
| Network Name | AMAZO-4 |
| CIDR Block | 32.184.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-32-197-3-103.compute-1.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-32-197-3-103.compute-1.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | awselb/2.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.us-east-1.prod.klei.com |
| Valid From | 2026-06-05T00:00:00+00:00 |
| Valid Until | 2026-12-19T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 07EEC75830735198A88C4E32E38B9728 |
| Thumbprint | F0A569F2269F4A03B06601A9DF6E3F18B12FDE38 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-19 21:26:17 UTC |
| Last Seen | 2026-09-19 21:26:17 UTC |
| Profile Built | 2026-09-23 09:49:14 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 24 |
Full dossier details are available via our API.