IP address 34.195.183.244 was identified as a cloud infrastructure node owned by Amazon Technologies Inc. (ASN 14618) located in Ashburn, VA. The system was classified as a hosting provider operating Web Server services. Forward DNS resolution confirmed the address belonged to `ec2-34-195-183-244.compute-1.amazonaws.com`.
Network analysis indicated a single active service on port 443 (HTTPS). The TLS certificate presented by the server was issued by DigiCert for the domain `samsungcloud.tv`, linked to Samsung Electronics CO., LTD. in South Korea. While geolocation data primarily placed the asset in the United States, this conflicted with the certificate's registration location, resulting in a geo validation inconsistency.
Threat intelligence feeds reported zero blacklist entries, known campaigns, or abuse indicators. The IP neighborhood (34.195.183.244/24) showed an abuse density of zero. Behavioral monitoring recorded no enumeration strikes, honeypot hits, or WAF violations. Despite a clean reputation score, the conflicting geolocation signals warranted a low confidence classification. Security operations teams were advised to monitor the asset for potential configuration drift or infrastructure misalignment rather than immediate blocking.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS14618 |
| Network Name | AT-88-Z |
| CIDR Block | 34.192.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-34-195-183-244.compute-1.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-34-195-183-244.compute-1.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | *.samsungcloud.tvsamsungcloud.tv |
| Valid From | 2026-07-15T00:00:00+00:00 |
| Valid Until | 2027-01-29T23:59:59+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 06D54C652EF74E38C30C783504A6CB83 |
| Thumbprint | B0A2CA461C07439524176DFEE423392DF637B3FD |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 50% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 30% | 9 | 10 |
| Data Coherence | Mixed Signals (68%) β 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
β TLS certificate claims KR but primary geo says US
π Observation Timeline π Live
| First Seen | 2026-09-12 17:58:55 UTC |
| Last Seen | 2026-09-12 17:58:55 UTC |
| Profile Built | 2026-09-12 18:14:43 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.