Intelligence Analysis of IP 34.209.205.242/32
The asset was identified as part of the Amazon Technologies Inc. infrastructure (ASN 16509), specifically within the 34.192.0.0/10 CIDR block. Geolocation data situated the endpoint in Boardman, Oregon, United States. Reverse DNS resolution confirmed the host as `ec2-34-209-205-242.us-west-2.compute.amazonaws.com`.
Threat assessments returned a reputation score of Low Risk with a risk score of 0. No indicators of compromise were found in threat feeds, and the address was not listed on any blacklists. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations. Network scanning detected no open ports, and the service purpose was classified as firewalled or no services.
Domain hygiene checks confirmed valid SPF and DMARC records. The asset was not flagged as a Tor exit node, known attacker, or spam source. Control plane data showed route stability as false, but no route changes were observed within the last 30 days. Overall confidence was labeled Very Low due to data sufficiency metrics, though the operator label was Minimal.
Based on the absence of malicious activity and confirmed cloud infrastructure ownership, the recommended action was to allow traffic with info-level severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AT-88-Z |
| CIDR Block | 34.192.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-34-209-205-242.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-34-209-205-242.us-west-2.compute.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | β |
π TLS Certificate
| SANs | *.np.communication.playstation.net |
| Valid From | 2024-11-14T04:27:13+00:00 |
| Valid Until | 2028-01-13T04:27:13+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha1RSA |
| Validity Period | 1155 days |
| Serial Number | 1790 |
| Thumbprint | D55908DF3FC2449976B83592EDDB54A17767A05B |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 6 |
| Data Coherence | Mixed Signals (68%) β 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
β TLS certificate claims JP but primary geo says US
π Observation Timeline π Live
| First Seen | 2026-09-23 00:37:21 UTC |
| Last Seen | 2026-09-23 00:37:21 UTC |
| Profile Built | 2026-09-23 00:51:37 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 25 |
Full dossier details are available via our API.