DIRECT
client IP 216.73.217.14 is not in any of the 287841 published Private Relay egress ranges
Client IP216.73.217.14 : 57308
ASN / OrgAS16509 AMAZON-02 - Amazon.com, Inc., US
Transporttls / HTTP/2.0
Hostrelay.aronstats.com
SNIrelay.aronstats.com
TLSTLS 1.3 / TLS_AES_128_GCM_SHA256 / ALPN h2
Time (UTC)2026-09-07 07:21:28.279
Egress list287841 prefixes, download:https://mask-api.icloud.com/egress-ip-ranges.csv

ClientHello

VersionsTLS 1.3TLS 1.2
ALPNh2http/1.1
Cipher suitesTLS_AES_256_GCM_SHA384TLS_AES_128_GCM_SHA256TLS_CHACHA20_POLY1305_SHA256TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA2560x00FF
CurvesX25519CurveP256CurveP384
Extensionsextended_master_secret(23)session_ticket(35)ec_point_formats(11)server_name(0)supported_groups(10)signature_algorithms(13)psk_key_exchange_modes(45)key_share(51)application_layer_protocol_negotiation(16)status_request(5)supported_versions(43)
ECH presentfalse

Request headers

Accept*/*
Accept-Encodinggzip, br, zstd, deflate
User-AgentMozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)

Raw JSON

{
  "timestamp": "2026-09-07T07:21:28.279061452Z",
  "transport": "tls",
  "remote_ip": "216.73.217.14",
  "remote_port": 57308,
  "client_ip": "216.73.217.14",
  "verdict": "DIRECT",
  "verdict_reason": "client IP 216.73.217.14 is not in any of the 287841 published Private Relay egress ranges",
  "asn": "AS16509",
  "org": "AMAZON-02 - Amazon.com, Inc., US",
  "asn_prefix": "216.73.216.0/22",
  "country": "US",
  "sni": "relay.aronstats.com",
  "tls_version_negotiated": "TLS 1.3",
  "cipher_negotiated": "TLS_AES_128_GCM_SHA256",
  "alpn_negotiated": "h2",
  "client_hello": {
    "server_name": "relay.aronstats.com",
    "supported_versions": [
      "TLS 1.3",
      "TLS 1.2"
    ],
    "cipher_suites": [
      "TLS_AES_256_GCM_SHA384",
      "TLS_AES_128_GCM_SHA256",
      "TLS_CHACHA20_POLY1305_SHA256",
      "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
      "0x00FF"
    ],
    "alpn": [
      "h2",
      "http/1.1"
    ],
    "supported_curves": [
      "X25519",
      "CurveP256",
      "CurveP384"
    ],
    "supported_points": "AA==",
    "signature_schemes": [
      "ECDSAWithP384AndSHA384",
      "ECDSAWithP256AndSHA256",
      "Ed25519",
      "PSSWithSHA512",
      "PSSWithSHA384",
      "PSSWithSHA256",
      "PKCS1WithSHA512",
      "PKCS1WithSHA384",
      "PKCS1WithSHA256"
    ],
    "extensions": [
      "extended_master_secret(23)",
      "session_ticket(35)",
      "ec_point_formats(11)",
      "server_name(0)",
      "supported_groups(10)",
      "signature_algorithms(13)",
      "psk_key_exchange_modes(45)",
      "key_share(51)",
      "application_layer_protocol_negotiation(16)",
      "status_request(5)",
      "supported_versions(43)"
    ],
    "extension_ids": [
      23,
      35,
      11,
      0,
      10,
      13,
      45,
      51,
      16,
      5,
      43
    ],
    "ech_present": false,
    "grease": false
  },
  "http_protocol": "HTTP/2.0",
  "method": "GET",
  "path": "/",
  "server_host": "relay.aronstats.com",
  "headers": [
    {
      "name": "Accept",
      "value": "*/*"
    },
    {
      "name": "Accept-Encoding",
      "value": "gzip, br, zstd, deflate"
    },
    {
      "name": "User-Agent",
      "value": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
    }
  ],
  "egress_list": {
    "prefixes": 287841,
    "source": "download:https://mask-api.icloud.com/egress-ip-ranges.csv",
    "loaded_at": "2026-09-07T07:08:52.160659624Z"
  }
}