IP INTELLIGENCE BRIEFING
Target: 13.250.24.206/32
Classification: Low Risk / Infrastructure IP
Date: Current Analysis
Analyst: IPDebrief Intelligence Team
---
**EXECUTIVE SUMMARY**
The IP address 13.250.24.206 is a legitimate Amazon Web Services (AWS) EC2 instance located in the Singapore region (ap-southeast-1). Current risk assessment indicates LOW RISK status with an overall risk score of 25. The IP is part of AWS's cloud infrastructure and shows no active malicious indicators.
---
**IDENTITY & OWNERSHIP**
| Attribute | Value |
|---|---|
| **Organization** | Amazon Data Services Singapore |
| **ASN** | 16509 (Amazon.com, Inc., US) |
| **Country** | Singapore (SG) |
| **City** | Singapore |
| **BGP Prefix** | 13.250.0.0/15 |
| **Infrastructure Type** | CloudCompute |
| **Network Role** | Cloud Hosting Provider |
Ownership Verification: The IP resolves to the canonical AWS EC2 hostname `ec2-13-250-24-206.ap-southeast-1.compute.amazonaws.com`, confirming legitimate cloud infrastructure ownership.
---
**THREAT ASSESSMENT**
| Metric | Value | Assessment |
|---|---|---|
| **Overall Risk Score** | 25/100 | Low |
| **Abuse Confidence Score** | N/A | Not applicable |
| **Blacklist Count** | 0 | Clean |
| **DNSBL Listings** | 1/8 | Minimal |
| **Known Threats** | None | Clean |
| **Is Known Attacker** | False | Legitimate |
| **Is Spam Source** | False | Legitimate |
| **Is Tor Exit** | False | Legitimate |
Threat Indicators: No active threat indicators detected. No correlation with known malicious campaigns or attributed threat actors.
---
**NETWORK BEHAVIOR**
| Signal | Observation |
|---|---|
| **Open Ports** | None detected (Firewalled / No Services) |
| **TLS/Certificates** | Not exposed |
| **HTTP Services** | Not active |
| **DNS Resolution** | Valid forward resolution to AWS hostname |
| **Email Reputation** | SPF/DMARC configured (domain: amazonaws.com) |
| **Anycast** | No |
| **Mobile/Residential** | No |
The IP exhibits typical cloud infrastructure behavior with no public-facing services exposed.
---
**SUBNET ANALYSIS (13.250.24.0/24)**
| Metric | Value |
|---|---|
| **Abuse Density** | 0 (Low) |
| **Classification** | Mostly Clean |
| **Active Siblings** | 1 |
| **Threat Siblings** | 1 |
| **High-Risk Neighbors** | 0 |
The /24 subnet shows minimal abuse activity, consistent with AWS's infrastructure patterns.
---
**OBSERVATION HISTORY**
Total Observations: 21 signals tracked
Risk Trend: Stable
Recent Signals:
- ASN: 16509 (Amazon.com, Inc., US)
- Geolocation: Singapore (56% confidence, 150km radius)
- Network Classification: Cloud Hosting (90% confidence)
Observation history demonstrates consistent cloud infrastructure signals without escalation in risk posture.
---
**RELATIONSHIP GRAPH**
Key Associations:
- DNS Hostnames: ec2-13-250-24-206.ap-southeast-1.compute.amazonaws.com
- Network: AMAZON-SIN (Singapore AWS network)
- Total Relationships: 50 indexed entities
All relationships point to legitimate AWS infrastructure components.
---
**RECOMMENDED ACTIONS**
SOC Analyst Guidance:
- Action: No blocking required. IP is legitimate AWS infrastructure.
- Firewall Rules: Standard cloud allow-list rules apply. No negative rules recommended.
- Monitoring: Continue baseline monitoring. No threat indicators warrant escalation.
- Investigation Priority: Low
---
**CONTROL PLANE INTELLIGENCE**
- Route Stability: False (normal for AWS)
- RPKI State: Not validated
- IRR Consistency: N/A
- Route Changes (30d): 0
- MoAS: False
- DNSSEC: Valid
---
**CONCLUSION**
IP 13.250.24.206 is a low-risk, legitimate AWS EC2 instance in Singapore's cloud infrastructure. No malicious activity has been detected. The IP exhibits normal cloud provider behavior with no open services, no threat indicators, and clean neighborhood metrics. SOC teams may treat this as trusted infrastructure with standard monitoring protocols.
---
*Generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Singapore |
| ASN | AS16509 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-13-250-24-206.ap-southeast-1.compute.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-13-250-24-206.ap-southeast-1.compute.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 54% | 1 | 10 |
| services | 15% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 31% | 2 | 3 |
| Overall | 29% | 10 | 25 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-11 15:03:58 UTC |
| Last Seen | 2026-06-27 19:29:01 UTC |
| Profile Built | 2026-06-28 13:36:02 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 36 |
Full dossier details are available via our API.