# 32.199.135.194 — IP Intelligence Summary

32.199.135.194 is an IPv4 address operated by Amazon.com, Inc. (AS14618), geolocated to Ashburn, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name ec2-32-199-135-194.compute-1.amazonaws.com. As of October 31, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/32.199.135.194
- Last updated: 2026-10-31

## Ownership

- Organization: Amazon.com, Inc.
- Network name: AMAZO-4
- Allocated block: 32.184.0.0/13
- ASN: AS14618 (https://ipdebrief.com/asn/14618)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Ashburn
- Region: VA
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ec2-32-199-135-194.compute-1.amazonaws.com
- Forward-confirmed: yes

## Exposed services

- 443/tcp — https
- 8443/tcp — https-alt

## Analyst narrative

**Intellectual Briefing: 32.199.135.194**

**Overview**

The IP address 32.199.135.194 was classified as High Risk with a risk score of 70. Observations recorded between October 22 and October 25, 2026, indicated active threat association.

**Ownership and Infrastructure**

The address belongs to Amazon.com, Inc. (ASN 14618) under the name AMAZO-4. The infrastructure type was identified as CloudCompute within the US East (N. Virginia) region. The PTR hostname resolved to ec2-32-199-135-194.compute-1.amazonaws.com.

**Threat Context**

Threat intelligence data showed a high likelihood of campaign association, correlating with 47 other IPs and 47 certificate matches. The certificate subject was *.iot.us-east-1.amazonaws.com. A specific contradiction was recorded where claimed geolocation contradicted RTT physics measurements.

**Technical Profile**

Active services included TCP 443 (HTTPS) and TCP 8443 (HTTPS-alt). The TLS certificate was issued to Amazon RSA 2048 M04 with a subject of *.iot.us-east-1.amazonaws.com. HTTP probing returned a 404 status with headers including x-amzn-requestid.

**Recommendation**

Despite the infrastructure being cloud-hosted, the recommendation was to Block due to the high risk score and strong threat evidence. Firewall rules were generated for iptables, nginx, and pf to drop traffic from this source.

## Nearby addresses

- 32.199.135.60 (https://ipdebrief.com/32.199.135.60)
- 32.199.135.155 (https://ipdebrief.com/32.199.135.155)

## Addresses sharing infrastructure

- 3.83.58.73 — Same TLS certificate (https://ipdebrief.com/3.83.58.73)
- 3.208.58.188 — Same TLS certificate (https://ipdebrief.com/3.208.58.188)
- 3.208.65.173 — Same TLS certificate (https://ipdebrief.com/3.208.65.173)
- 3.208.141.112 — Same TLS certificate (https://ipdebrief.com/3.208.141.112)
- 3.212.16.54 — Same TLS certificate (https://ipdebrief.com/3.212.16.54)
- 3.214.183.82 — Same TLS certificate (https://ipdebrief.com/3.214.183.82)
- 3.219.135.88 — Same TLS certificate (https://ipdebrief.com/3.219.135.88)
- 3.228.228.94 — Same TLS certificate (https://ipdebrief.com/3.228.228.94)
- 3.231.62.33 — Same TLS certificate (https://ipdebrief.com/3.231.62.33)
- 18.211.175.205 — Same TLS certificate (https://ipdebrief.com/18.211.175.205)
- 32.194.203.123 — Same TLS certificate (https://ipdebrief.com/32.194.203.123)
- 32.197.118.179 — Same TLS certificate (https://ipdebrief.com/32.197.118.179)

---

Source: IPDebrief, "32.199.135.194 IP intelligence", https://ipdebrief.com/32.199.135.194, updated 2026-10-31. Assessments are probabilistic.