34.212.160.172
IP address 34.212.160.172 was associated with Amazon Web Services infrastructure located in us-west-2 (Oregon, US). The IP resolved to an EC2 instance (ec2-34-212-160-172.us-west-2.compute.amazonaws.com) and hosted the domain nights-watch.v2-us-west-2.cf-embed.net. Risk assessment returned a Low Risk classification with a score of 20. Threat indicators showed no open ports, zero blacklist listings, and no known association with active campaigns or spam sources. Behavioral data recorded zero honeypot hits, enumeration strikes, or WAF violations. Geolocation validation flagged a contradiction between the claimed distance of 7,950.7km and the measured RTT of 88ms. Ownership attribution remained insufficient for definitive labeling. The recommendation classified the threat severity as low with an instruction to monitor for signal changes due to data contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Technologies Inc. |
| ASN | AS16509 |
| Network Name | AT-88-Z |
| CIDR Block | 34.192.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-34-212-160-172.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Hosted Domain | ec2-34-212-160-172.us-west-2.compute.amazonaws.com |
| Hosted Domain | nights-watch.v2-us-west-2.cf-embed.net |
| Forward Hostnames | ec2-34-212-160-172.us-west-2.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | m.stripe.com |
| Valid From | 2026-07-28T00:00:00+00:00 |
| Valid Until | 2026-11-12T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 107 days |
| Serial Number | 079714B51DE2FB089B2837B318AE9E16 |
| Thumbprint | 01C256814B6CF6952ACF940FBD4DD26D1CF07D2A |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 20% | 1 | 1 |
| routing | 20% | 1 | 1 |
| services | 20% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 31% | 2 | 2 |
| Overall | 15% | 5 | 5 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-04 01:49:10 UTC |
| Last Seen | 2026-09-05 03:06:39 UTC |
| Profile Built | 2026-09-05 03:22:34 UTC |
| Data Freshness | Live |
| Signal Types | 34 |
| Total Observations | 34 |
Full dossier details are available via our API.