54.251.28.84 Threat Intelligence and Host Information

General

IP Address
54.251.28.84
IPv4 Address
Location
🇸🇬 Singapore, Singapore
SG
Network
AS16509
AMAZON-02
Threat Score
22/100
Low Risk
BruteforceBrute-ForceSSH
Geographic Location
Country
Singapore
City
Singapore
Region
Unknown
Coordinates
1.3036, 103.8554
Network Information
ASN
AS16509
Organization
AMAZON-02
Network
AS16509 AMAZON-02
WHOIS Information
NetRange
54.251.0.0 - 54.251.255.255
CIDR
54.251.0.0/16
NetName
AMAZO-ZSIN1
NetHandle
NET-54-251-0-0-1
Parent
AMAZON-2011L (NET-54-224-0-0-1)
NetType
Reallocated
OriginAS
Organization
Amazon.com, Inc. (AMAZO-4)
RegDate
2005-09-29
Updated
2022-09-30
Comment
http://ec2.amazonaws.com
Ref
https://rdap.arin.net/registry/entity/AMAZO-4
OrgName
Amazon.com, Inc.
OrgId
AMAZO-4
Address
P.O. Box 81226
City
Seattle
StateProv
WA
PostalCode
98108-1226
Country
US
OrgAbuseHandle
AEA8-ARIN
OrgAbuseName
Amazon EC2 Abuse
OrgAbusePhone
+1-206-555-0000
OrgAbuseEmail
trustandsafety@support.aws.com
OrgAbuseRef
https://rdap.arin.net/registry/entity/AEA8-ARIN
Attack Logs
Date Target Location Protocol Link
2026-02-11 London, UK SSH View Log

  • Country: Singapore
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: ssh
  • Passive DNS Results: www.duykhanh09103vn.tk duykhanh09103vn.tk duykhanh09103.gq v2b.duykhanh09103.gq
Disclaimer
This page contains threat intelligence information for the IPv4 address 54.251.28.84 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.