Home › Threat IP › 54.85.32.163
Active Threat · Scanner

54.85.32.163 — IP Threat Intelligence

Amazon.com, Inc. · AS14618 · US

● ACTIVE THREAT
Activity History
First seen 2026-08-30 · Last active 2026-10-15 · Today
First detected
2026-08-30
Last active
2026-10-15
API: Full IP Timeline
Every activation, deactivation, ASN change, and malware family addition — timestamped and queryable.
GET /v1/ip/54.85.32.163/history →
Network IntelligenceWHOIS + RIPE
IP Address
54.85.32.163
Version
IPv4
Organization / ISP
Amazon.com, Inc.
ASN
AS14618 Provider → as
Country
US
Announced Prefix
—
TOR Exit Node
No
VPN / Proxy
No
Confidence Score ? CONFIDENCE: 70/100 — HIGH
Calculated like a credit score. Decays −3 pts/month when inactive. Min 5.
Source corroboration +10/30
CVE exploitation +0/20
Threat severity +10/20
Named malware +0/15
Activity (0d ago) +15/15
Reappeared +0/10
70% (High)
Threat Type
Scanner
AbuseIPDB Report Community Abuse Reports
Abuse Confidence Score
0
Low Risk
0 reports in 90d
Usage Type
Data Center/Web Hosting/Transit
ISP
Amazon Technologies Inc.
Checked 13 Sept 2026 · View full report →
Host Intelligence Shodan InternetDB · DNS
Reverse DNS (PTR)
ec2-54-85-32-163.compute-1.amazonaws.com
IP Range & NetworkRIPE
IP Address
54.85.32.163
Prefix / CIDR
—
Range Size
—
IP Version
IPv4
Block Holder
AMAZON-AES - Amazon.com, Inc.
Abuse Contact
trustandsafety@support.aws.com
Detection Feeds
1 corroborating intelligence source
At a Glance
First detected
2026-08-30
Last seen active
2026-10-15 (Today)
Times reactivated
0
Confidence Score
70% (High)
? CONFIDENCE: 70/100 — HIGH
Calculated like a credit score. Decays −3 pts/month when inactive. Minimum score: 5.
Source corroboration +10/30
CVE exploitation +0/20
Threat severity +10/20
Named malware +0/15
Activity (0d ago) +15/15
Reappeared +0/10
Same ASNAS14618
18.97.9.97 Today 18.97.9.103 Today 18.97.9.100 Today 18.97.9.102 Today 18.97.9.99 Today 18.97.9.96 Today 18.97.9.101 Today 18.97.9.98 Today
Network (ASN)
AS Number
AS14618
Holder
AMAZON-AES - Amazon.com, Inc.
Network type
as
→ View all IPs in AS14618
API Access
GET /v1/ip/54.85.32.163 GET /v1/ip/54.85.32.163/history Get API Key
Auto-Block This

Pull this IP — or the whole live feed — straight into fail2ban, iptables/nftables, pfSense, or a SIEM. JSON only, no scraping, no static export to go stale.

Check one IP before you ban it
curl -s -H "Authorization: Bearer $VIT_KEY" \
  https://api.valtersit.com/api/v1/ip/54.85.32.163 \
  | jq -r 'select(.confidence >= 75) | .ip' \
  | xargs -r -I{} iptables -A INPUT -s {} -j DROP
Sync a fail2ban / firewall blocklist (cron)
curl -s -H "Authorization: Bearer $VIT_KEY" \
  "https://api.valtersit.com/api/v1/ip/feed?type=botnet_c2&min_confidence=75" \
  | jq -r '.data[].ip' > /etc/fail2ban/blocklist.local

PAYG: 1 credit/IP, or up to 10 IPs in one ?ips= batch for 1 credit. Standard/Pro: free, full filter browsing (type, min_confidence, country, cve).