13.245.94.92📋 Copy

IP INTELLIGENCE BRIEFING: 13.245.94.92/32

Classification: LOW RISK / BENIGN INFRASTRUCTURE

Report Date: 2026-08-13

Analysis Timestamp: Current session

---

EXECUTIVE SUMMARY

IP address 13.245.94.92 is classified as low-risk with a risk score of 0. This address belongs to Amazon Web Services' Cape Town infrastructure (AMAZON-CPT) and demonstrates no malicious indicators across all observed metrics. The IP shows stable ownership, consistent geolocation, and no association with known threat actors or campaigns.

---

INFRASTRUCTURE PROFILE

NETWORK SERVICES

• Port 22/TCP (SSH): Open with banner "SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.5"
• TLS Certificate: None observed
• HTTP Service: None observed

THREAT ASSESSMENT

Threat Indicators: None

• Abuse Confidence Score: N/A
• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False

Control Plane:

• Origin ASN: 16509
• Route Stability: False (minor fluctuation detected)
• DNSSEC Valid: True
• DNSBL Listed: 0/8 lists

---

OBSERVATION HISTORY

Total Observations: 15

Threat Persistence Days: 0

Is Persistently Malicious: False

Recent signal history (2026-08-13) indicates:

• Consistent geolocation data (Cape Town, ZA) with high confidence (0.70-0.95)
• Ownership data stable with ARIN registration
• Subnet classification remains "clean" with 0 abuse density
• No emerging threats or behavioral changes detected

---

RELATIONSHIP ANALYSIS

Related Entities:

1. DNS Association: ec2-13-245-94-92.af-south-1.compute.amazonaws.com

2. Same Network: AMAZON-CPT (13.244.0.0/15)

No malicious or suspicious relationships detected.

---

NEIGHBORHOOD ANALYSIS

Subnet: 13.245.94.92/24

• Abuse Density: 0
• Classification: Clean
• Threat Siblings: 0
• Active Siblings: 1

No neighboring IPs show threat indicators.

---

RECOMMENDATIONS

Security Actions: None required

• Risk score of 0 and absence of threat indicators indicate this is legitimate AWS infrastructure
• No firewall rules or blocking recommended
• Standard monitoring practices apply

SOC Analyst Notes:

• This is an EC2 instance in AWS's Cape Town region (af-south-1)
• SSH service is exposed, which is typical for EC2 management
• No immediate threat action warranted
• If traffic anomalies observed, investigate from application layer rather than IP reputation

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.