# 34.231.194.23 — IP Intelligence Summary

34.231.194.23 is an IPv4 address operated by Amazon Technologies Inc. (AS14618), geolocated to Ashburn, United States. Its reverse DNS name is ec2-34-231-194-23.compute-1.amazonaws.com. As of November 3, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/34.231.194.23
- Last updated: 2026-11-03

## Ownership

- Organization: Amazon Technologies Inc.
- Network name: AT-88-Z
- Allocated block: 34.192.0.0/10
- ASN: AS14618 (https://ipdebrief.com/asn/14618)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Ashburn
- Region: VA
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: Unknown
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ec2-34-231-194-23.compute-1.amazonaws.com
- Forward-confirmed: yes

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

IP address 34.231.194.23 belongs to Amazon Technologies Inc. (ASN 14618) in Ashburn, VA. The profile assigned a High Risk reputation with a risk score of 70. Despite neighborhood classification as clean with 0 abuse density, the recommendation was to Block traffic with critical severity due to strong threat evidence.

Technical reconnaissance identified open TCP ports 80 and 443. The HTTP server banner reported awselb/2.0, while fingerprinting detected nginx running HTTP/2.0. TLS certificates validated for *.intercom.com. Campaign analysis showed a high likelihood with 24 correlated IPs and 24 certificate matches.

Attribution confidence was Moderate, though overall profile confidence was Low (0.3083) with high data sufficiency (0.8333). A recorded contradiction noted a high authority score despite appearance on threat lists. Security teams should implement firewall rules to drop traffic from this source immediately.

## Addresses sharing infrastructure

- 3.212.108.16 — Same TLS certificate (https://ipdebrief.com/3.212.108.16)
- 13.217.249.237 — Same TLS certificate (https://ipdebrief.com/13.217.249.237)
- 18.210.117.75 — Same TLS certificate (https://ipdebrief.com/18.210.117.75)
- 18.214.158.101 — Same TLS certificate (https://ipdebrief.com/18.214.158.101)
- 23.23.51.36 — Same TLS certificate (https://ipdebrief.com/23.23.51.36)
- 34.199.80.14 — Same TLS certificate (https://ipdebrief.com/34.199.80.14)
- 34.199.136.67 — Same TLS certificate (https://ipdebrief.com/34.199.136.67)
- 44.194.166.2 — Same TLS certificate (https://ipdebrief.com/44.194.166.2)
- 44.196.132.62 — Same TLS certificate (https://ipdebrief.com/44.196.132.62)
- 44.206.115.198 — Same TLS certificate (https://ipdebrief.com/44.206.115.198)
- 44.209.128.239 — Same TLS certificate (https://ipdebrief.com/44.209.128.239)
- 44.219.21.77 — Same TLS certificate (https://ipdebrief.com/44.219.21.77)

---

Source: IPDebrief, "34.231.194.23 IP intelligence", https://ipdebrief.com/34.231.194.23, updated 2026-11-03. Assessments are probabilistic.