13.128.248.207
Intelligence assessment for IP 13.128.248.207 identified the host as an infrastructure asset belonging to Amazon.com, Inc. (ASN 16509) within the AMAZO-4 CIDR block. Reverse DNS resolution confirmed the hostname ec2-13-128-248-207.compute-1.amazonaws.com, associated with the hosted domain lms-aws-us-east-1-scl-1a.roblox.com. Network scanning detected an active TCP/443 connection utilizing the nginx server software with a TLS certificate issued by Amazon RSA 2048 M01.
Reputation analysis assigned a Low Risk status with a risk score of 25. The address was not listed on known threat feeds, and behavioral analysis recorded zero incidents, honeypot hits, or enumeration strikes. Geolocation data reported Santiago, Chile, though a contradiction existed between sources indicating the United States. Attribution confidence remained moderate at 55%.
Control plane metrics indicated one DNS blacklist listing among eight total lists checked. The overall profile confidence was rated Very Low (0.125) due to data sufficiency limitations. Operational recommendations advised monitoring the address for changes due to signal contradictions, maintaining a low severity classification.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Network Name | AMAZO-4 |
| CIDR Block | 13.128.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-13-128-248-207.compute-1.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-13-128-248-207.compute-1.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | lms-aws-us-east-1-scl-1a.roblox.com |
| Valid From | 2026-09-14T00:00:00+00:00 |
| Valid Until | 2027-03-30T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 033FD362B3553ED857CF2B7F85C75FF8 |
| Thumbprint | 0BCCC20F1EEEC698057FF0301BDD1912D36303DE |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-21 20:13:03 UTC |
| Last Seen | 2026-09-21 20:13:03 UTC |
| Profile Built | 2026-09-21 20:28:02 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.