DIRECT
client IP 216.73.217.14 is not in any of the 287841 published Private Relay egress ranges
| Client IP | 216.73.217.14 : 57308 |
| ASN / Org | AS16509 AMAZON-02 - Amazon.com, Inc., US |
| Transport | tls / HTTP/2.0 |
| Host | relay.aronstats.com |
| SNI | relay.aronstats.com |
| TLS | TLS 1.3 / TLS_AES_128_GCM_SHA256 / ALPN h2 |
| Time (UTC) | 2026-09-07 07:21:28.279 |
| Egress list | 287841 prefixes, download:https://mask-api.icloud.com/egress-ip-ranges.csv |
ClientHello
| Versions | TLS 1.3TLS 1.2 |
| ALPN | h2http/1.1 |
| Cipher suites | TLS_AES_256_GCM_SHA384TLS_AES_128_GCM_SHA256TLS_CHACHA20_POLY1305_SHA256TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA2560x00FF |
| Curves | X25519CurveP256CurveP384 |
| Extensions | extended_master_secret(23)session_ticket(35)ec_point_formats(11)server_name(0)supported_groups(10)signature_algorithms(13)psk_key_exchange_modes(45)key_share(51)application_layer_protocol_negotiation(16)status_request(5)supported_versions(43) |
| ECH present | false |
Request headers
| Accept | */* |
| Accept-Encoding | gzip, br, zstd, deflate |
| User-Agent | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
Raw JSON
{
"timestamp": "2026-09-07T07:21:28.279061452Z",
"transport": "tls",
"remote_ip": "216.73.217.14",
"remote_port": 57308,
"client_ip": "216.73.217.14",
"verdict": "DIRECT",
"verdict_reason": "client IP 216.73.217.14 is not in any of the 287841 published Private Relay egress ranges",
"asn": "AS16509",
"org": "AMAZON-02 - Amazon.com, Inc., US",
"asn_prefix": "216.73.216.0/22",
"country": "US",
"sni": "relay.aronstats.com",
"tls_version_negotiated": "TLS 1.3",
"cipher_negotiated": "TLS_AES_128_GCM_SHA256",
"alpn_negotiated": "h2",
"client_hello": {
"server_name": "relay.aronstats.com",
"supported_versions": [
"TLS 1.3",
"TLS 1.2"
],
"cipher_suites": [
"TLS_AES_256_GCM_SHA384",
"TLS_AES_128_GCM_SHA256",
"TLS_CHACHA20_POLY1305_SHA256",
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
"0x00FF"
],
"alpn": [
"h2",
"http/1.1"
],
"supported_curves": [
"X25519",
"CurveP256",
"CurveP384"
],
"supported_points": "AA==",
"signature_schemes": [
"ECDSAWithP384AndSHA384",
"ECDSAWithP256AndSHA256",
"Ed25519",
"PSSWithSHA512",
"PSSWithSHA384",
"PSSWithSHA256",
"PKCS1WithSHA512",
"PKCS1WithSHA384",
"PKCS1WithSHA256"
],
"extensions": [
"extended_master_secret(23)",
"session_ticket(35)",
"ec_point_formats(11)",
"server_name(0)",
"supported_groups(10)",
"signature_algorithms(13)",
"psk_key_exchange_modes(45)",
"key_share(51)",
"application_layer_protocol_negotiation(16)",
"status_request(5)",
"supported_versions(43)"
],
"extension_ids": [
23,
35,
11,
0,
10,
13,
45,
51,
16,
5,
43
],
"ech_present": false,
"grease": false
},
"http_protocol": "HTTP/2.0",
"method": "GET",
"path": "/",
"server_host": "relay.aronstats.com",
"headers": [
{
"name": "Accept",
"value": "*/*"
},
{
"name": "Accept-Encoding",
"value": "gzip, br, zstd, deflate"
},
{
"name": "User-Agent",
"value": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
}
],
"egress_list": {
"prefixes": 287841,
"source": "download:https://mask-api.icloud.com/egress-ip-ranges.csv",
"loaded_at": "2026-09-07T07:08:52.160659624Z"
}
}