Intelligence Briefing: 44.234.158.91/32
Ownership and Infrastructure
The IP address 44.234.158.91/32 was assigned to Amazon.com, Inc. (ASN 16509) under the AMAZO-ZPDX network block (44.224.0.0/11). Geolocation data placed the infrastructure in Portland, Oregon, United States. The service role was classified as a web server, with active service on TCP port 443 (HTTPS) via Nginx.
Certificate and Identity Analysis
TLS certificate inspection identified a mismatch between the network location and certificate authority data. The certificate was issued by SCEI DNAS Root 05 (Sony Computer Entertainment Inc.) for the subject `*.np.communication.playstation.net`, indicating a Japanese origin claim, while geolocation consensus placed the IP in the US.
Threat and Reputation Status
The address reported a Low Risk reputation with a risk score of 0. No blacklists, known campaigns, or threat feed indicators were detected. The IP was not associated with Tor, proxy, or mobile infrastructure.
Observations and Recommendations
Operational analysis identified signal contradictions regarding country attribution and geo-validation inconsistencies. The IP responded with a 403 Forbidden status code. Due to signal inconsistencies, the recommended action was to monitor the address for changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-ZPDX |
| CIDR Block | 44.224.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-44-234-158-91.us-west-2.compute.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-44-234-158-91.us-west-2.compute.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | β |
π TLS Certificate
| SANs | *.np.communication.playstation.net |
| Valid From | 2024-11-14T04:27:13+00:00 |
| Valid Until | 2028-01-13T04:27:13+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha1RSA |
| Validity Period | 1155 days |
| Serial Number | 1790 |
| Thumbprint | D55908DF3FC2449976B83592EDDB54A17767A05B |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 20% | 6 | 6 |
| Data Coherence | Mixed Signals (68%) β 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
β TLS certificate claims JP but primary geo says US
π Observation Timeline π Live
| First Seen | 2026-09-18 21:32:37 UTC |
| Last Seen | 2026-09-18 21:32:37 UTC |
| Profile Built | 2026-09-18 21:44:28 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.