13.246.74.206
The IP address 13.246.74.206 was classified as Low Risk with a risk score of 0. Ownership records identified the address as belonging to Amazon Data Services South Africa (ASN 16509, AMAZON-CPT) within the 13.246.0.0/16 block. Geolocation data placed the endpoint in Cape Town, South Africa.
Threat analysis returned no indicators of malicious activity. The address was not listed on blacklists, nor was it flagged as a Tor exit, known attacker, or spam source. Network role analysis indicated the endpoint was a cloud infrastructure service (Amazon Web Services EC2) with no open ports and a service purpose marked as firewalled. DNS records confirmed a forward-confirmed reverse DNS resolution to ec2-13-246-74-206.af-south-1.compute.amazonaws.com.
Behavioral metrics recorded zero honeypot hits, enumeration strikes, or WAF violations. The system recommendation was to Allow traffic with an information severity rating, citing the forward-confirmed reverse DNS as a legitimate endpoint. While the overall confidence label was Very Low due to limited observation history, the profile maintained consistency with no contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amazon Data Services South Africa |
| ASN | AS16509 |
| Network Name | AMAZON-CPT |
| CIDR Block | 13.246.0.0/16 |
| RIR | ARIN |
| Country | South Africa |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ec2-13-246-74-206.af-south-1.compute.amazonaws.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ec2-13-246-74-206.af-south-1.compute.amazonaws.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | lms-aws-af-south-1.roblox.com |
| Valid From | 2026-09-02T00:00:00+00:00 |
| Valid Until | 2027-03-18T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 197 days |
| Serial Number | 08B67EC5521695A6CC47E5FB955487B9 |
| Thumbprint | EF45007CAF91EDC9F9637D30E905C1BAE515C480 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-12 16:45:25 UTC |
| Last Seen | 2026-09-12 16:45:25 UTC |
| Profile Built | 2026-09-12 16:54:34 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.