IOC Radar
IPLowSignal 0/100

54.70.223.12

Location
United StatesUnited States
Portland, Oregon
ASN
AS16509
AWS EC2 (us-west-2)
First Seen
Jun 12, 2025
Last Seen
Jul 22, 2025
Jun 12
First Seen
363d ago
Jul 22
Last Seen
323d ago
1
Reports
source reports
0%
Confidence
low
0/91
VirusTotal
detections
Found in 1 report. Confidence: low. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
0%
Signal Score
0 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryUSUnited States
RegionPortland, Oregon
ASNAS16509
OrganizationAWS EC2 (us-west-2)

Feed Intelligence Summary

1 report0% confidence
1
Source reports
0%
Confidence score
Category tags
indicatornetworkresearched

Activity Timeline

1 total obs
Jul 22Jul 22

Threat Activity Heatmap

· Peak: 2025-07-22
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

The indicator of compromise (IOC) in question is an IPv4 address, 54.70.223.12. The IOC has been identified by SOCRadar Attack Surface Intelligence(ASI). A benign whitelist status coupled with a negligible score of 0.0 suggests a minimal or non-existent threat. Given these characteristics, this indicator does not imply malicious activity, urgent containment, or high severity. Its inclusion in threat intelligence feeds does not automatically indicate hostile behavior. Instead, this IOC should be …

Threat ScoreLow Risk
0
SIGNAL
Signal Score
0%
Confidence
1
Reports
First seenJun 12, 2025
Last seenJul 22, 2025
GeolocationUS
CountryUnited States
LocationPortland, Oregon
ASNAS16509
OrgAWS EC2 (us-west-2)
Coords45.5235, -122.6760

VirusTotal

0/ 91vendors flagged
0% detection rateJun 10, 2026

WHOIS

raw
NetRange: 54.64.0.0 - 54.95.255.255 CIDR: 54.64.0.0/11 NetName: AMAZON-2011L NetHandle: NET-54-64-0-0-1 Parent: NET54 (NET-54-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Amazon Technologies Inc. (AT-88-Z) RegDate: 2014-06-20 Updated: 2021-02-10 Ref: https://rdap.arin.net/registry/ip/54.64.0.0 OrgName: Amazon Technologies Inc. OrgId: AT-88-Z Address: 410 Terry Ave N. City: Seattle StateProv: WA PostalCode: 98109 Country: US RegDate: 2011-12-08 Updated: 2024-01-24 Comment: All abuse reports MUST include: Comment: * src IP Comment: * dest IP (your IP) Comment: * dest port Comment: * Accurate date/timestamp and timezone of activity Comment: * Intensity/frequency (short log extracts) Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time. Ref: https://rdap.arin.net/registry/entity/AT-88-Z OrgRoutingHandle: IPROU3-ARIN OrgRoutingName: IP Routing OrgRoutingPhone: +1-206-555-0000 OrgRoutingEmail: [email protected] OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN OrgTechHandle: ANO24-ARIN OrgTechName: Amazon EC2 Network Operations OrgTechPhone: +1-206-555-0000 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN OrgNOCHandle: AANO1-ARIN OrgNOCName: Amazon AWS Network Operations OrgNOCPhone: +1-206-555-0000 OrgNOCEmail: [email protected] OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN OrgRoutingHandle: ARMP-ARIN OrgRoutingName: AWS RPKI Management POC OrgRoutingPhone: +1-206-555-0000 OrgRoutingEmail: [email protected] OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN OrgAbuseHandle: AEA8-ARIN OrgAbuseName: Amazon EC2 Abuse OrgAbusePhone: +1-206-555-0000 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

low
First detected 1 year ago · Last seen 10 months ago
Appeared in 1 threat report