# IP Intelligence Briefing: 13.53.38.71/32
Classification: Legitimate Cloud Infrastructure
Date: 2026-08-13
Risk Level: Low Risk (Score: 0)
## Infrastructure Profile
IP 13.53.38.71 is a legitimate Amazon Web Services (AWS) EC2 instance deployed in the eu-north-1 region (Stockholm, Sweden). The address resolves to hostname `ec2-13-53-38-71.eu-north-1.compute.amazonaws.com` and is associated with Amazon Data Services Sweden (AS16509, AMAZON-ARN). The IP operates within the 13.53.0.0/16 CIDR block.
## Network Assessment
- Infrastructure Type: Cloud compute instance
- Open Services: None detected
- DNS Resolution: Forward confirmed, single PTR record
- TLS/HTTP Services: Not observed
- Blacklist Status: Clean (0 blacklist entries)
## Threat Intelligence Summary
The IP exhibits no threat indicators. Abuse confidence score is not applicable. Known attacker, spam source, and Tor exit node flags are all negative. No campaigns or correlated IPs were identified. The control plane shows the IP is route-stable with no route changes in the last 30 days.
## Historical Activity
Observation history indicates consistent benign behavior across 23 signals. A historical geolocation probe from 2026-08-06 detected a routing hop via Newark, US (iata: EWR), but this was a network transit hop rather than the endpoint. Current consensus geolocation is Stockholm, Sweden. No threat persistence indicators were observed over the observation period.
## Neighborhood Analysis
The /24 subnet (13.53.38.71/24) shows zero abuse density and is classified as "clean." No active neighboring IPs were detected in the immediate subnet range.
## Recommended Actions
No firewall rules or blocking actions are recommended. The IP is a legitimate AWS infrastructure asset with no malicious behavior observed. Standard cloud provider IP policies apply.
Summary: 13.53.38.71 is a clean AWS EC2 instance in Stockholm, Sweden. No security actions required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Sweden |
| ASN | AS16509 |
| Network Name | AMAZON-ARN |
| CIDR Block | 13.53.0.0/16 |
| RIR | ARIN |
| Country | Sweden |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-13-53-38-71.eu-north-1.compute.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-13-53-38-71.eu-north-1.compute.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-03 05:13:45 UTC |
| Last Seen | 2026-08-13 04:35:33 UTC |
| Profile Built | 2026-08-13 05:06:35 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 36 |
Full dossier details are available via our API.