IOC Radar
IPHighVerifiedSignal 31/100

54.240.40.207

Location
United StatesUnited States
Seattle, Quebec
ASN
AS16509
Amazon Web Services, Inc.
First Seen
Dec 6, 2025
Last Seen
Apr 10, 2026
Dec 6
First Seen
197d ago
Apr 10
Last Seen
72d ago
3
Reports
source reports
31%
Confidence
high
Found in 3 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
31%
Signal Score
31 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

6 techniques

Network Information

CountryUSUnited States
RegionSeattle, Quebec
ASNAS16509
OrganizationAmazon Web Services, Inc.

Feed Intelligence Summary

3 reports31% confidence
3
Source reports
31%
Confidence score
Category tags
active scanactive scanningbrute forcecacanadacredential harvestingcredential stuffingidentity & access exploitationindicatornetworknorth americaphishingphishing attackreconnaissanceresearchedscannersocial engineeringt1566.001t1566.002t1566.003t1595.001t1595.002t1595.003united statesus

Activity Timeline

1 total obs
Apr 10Apr 10

Threat Activity Heatmap

· Peak: 2026-04-10
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
31
SIGNAL
Signal Score
31%
Confidence
3
Reports
First seenDec 6, 2025
Last seenApr 10, 2026
Verified IOC
GeolocationUS
CountryUnited States
LocationSeattle, Quebec
ASNAS16509
OrgAmazon Web Services, Inc.
Coords47.5928, -122.3160

VirusTotal

Not checked

WHOIS

raw
Amazon Technologies Inc. AMAZON-2011L (NET-54-224-0-0-1) 54.224.0.0 - 54.255.255.255 Amazon Web Services, Inc. AWSEMAIL-Z (NET-54-240-0-0-2) 54.240.0.0 - 54.240.63.255

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 6 months ago · Last seen 2 months ago
Appeared in 3 threat reports