# 128.116.54.11 — IP Intelligence Summary

128.116.54.11 is an IPv4 address operated by Roblox (AS22697), geolocated to Singapore, Singapore. As of October 30, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/128.116.54.11
- Last updated: 2026-10-30

## Ownership

- Organization: Roblox
- Network name: RC-376
- Allocated block: 128.116.0.0/17
- ASN: AS22697 (https://ipdebrief.com/asn/22697)
- Regional registry: ARIN

## Location

- City: Singapore
- Region: —
- Country: Singapore
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 443/tcp — https

## Analyst narrative

Analysis identified 128.116.54.11 as a Web Server associated with Roblox Corporation (ASN 22697, 128.116.0.0/17). Geolocation data placed the infrastructure in Singapore, whereas the TLS certificate claimed a US origin for rover.na.roblox.net. The profile classified the IP as Campaign Infrastructure with a High Risk score of 70 and a critical severity rating. Correlation analysis linked the address to 36 correlated IPs and 18 certificate matches. The endpoint served HTTPS on port 443 via Pingora, returning a 502 status code. Despite zero honeypot hits and no blacklist listings, the risk assessment recommended blocking the traffic due to strong threat evidence.

## Nearby addresses

- 128.116.54.3 (https://ipdebrief.com/128.116.54.3)
- 128.116.54.33 (https://ipdebrief.com/128.116.54.33)

## Addresses sharing infrastructure

- 128.116.2.11 — Same TLS certificate (https://ipdebrief.com/128.116.2.11)
- 128.116.5.11 — Same TLS certificate (https://ipdebrief.com/128.116.5.11)
- 128.116.13.11 — Same TLS certificate (https://ipdebrief.com/128.116.13.11)
- 128.116.14.11 — Same TLS certificate (https://ipdebrief.com/128.116.14.11)
- 128.116.21.11 — Same TLS certificate (https://ipdebrief.com/128.116.21.11)
- 128.116.30.11 — Same TLS certificate (https://ipdebrief.com/128.116.30.11)
- 128.116.31.11 — Same TLS certificate (https://ipdebrief.com/128.116.31.11)
- 128.116.32.11 — Same TLS certificate (https://ipdebrief.com/128.116.32.11)
- 128.116.44.11 — Same TLS certificate (https://ipdebrief.com/128.116.44.11)
- 128.116.45.11 — Same TLS certificate (https://ipdebrief.com/128.116.45.11)
- 128.116.47.11 — Same TLS certificate (https://ipdebrief.com/128.116.47.11)
- 128.116.48.11 — Same TLS certificate (https://ipdebrief.com/128.116.48.11)

---

Source: IPDebrief, "128.116.54.11 IP intelligence", https://ipdebrief.com/128.116.54.11, updated 2026-10-30. Assessments are probabilistic.