## IP Intelligence Briefing: 16.171.175.115/32
Classification: Low Risk | Assessment Date: 2026-06-20
---
Executive Summary
IP 16.171.175.115 is a legitimate Amazon Web Services (AWS) EC2 compute instance located in Stockholm, Sweden. Risk score of 25 indicates low risk profile with no active threat indicators. No security actions required.
Ownership & Infrastructure
- ASN: 16509 (Amazon Data Services Sweden)
- Organization: Amazon Web Services
- Cloud Provider: AWS (eu-north-1 region)
- Hostname: ec2-16-171-175-115.eu-north-1.compute.amazonaws.com
- Geolocation: Stockholm, Sweden (59.33°N, 18.07°E)
Risk Assessment
- Risk Score: 25/100 (Low Risk)
- Reputation: Low Risk
- Abuse Confidence: None detected
- Blacklist Status: 0/8 DNSBL lists
- Known Attacker: No
- Tor Exit Node: No
- Persistent Threat: No (0 threat persistence days)
Network Profile
- Infrastructure Type: Cloud Compute / Single-Service Host
- Open Ports: 80/tcp (HTTP)
- HTTP Status: 302 (redirect)
- Server: Standard AWS EC2 configuration
- DNS Resolution: Valid forward/reverse DNS records
- Security Headers: CSP, HSTS, Referrer Policy, Permissions Policy enabled
Neighborhood Analysis
- Subnet: 16.171.175.0/24
- Abuse Density: 1 (low)
- Classification: Mostly Clean
- Threat Siblings: 1
- Active Siblings: 0
Relationship Graph
- DNS Associations: 40 relationships (primarily AWS EC2 hostname)
- Network Affiliation: AMAZON-ARN
- Related Entities: AWS infrastructure components only
Observation History (21 Signals)
- Most Recent: 2026-06-20T06:40:22+00:00
- Signal Types: HTTP fingerprinting, geolocation, operator scoring, service discovery
- Trend: Stable; no escalation in threat indicators
- Ownership Changes: 0
- Threat Observation Count: 1 (non-malicious)
Recommended Actions
None Required. The IP represents legitimate AWS cloud infrastructure with no malicious activity detected. Standard monitoring procedures apply.
SOC Analyst Notes
This IP is part of Amazon's public cloud infrastructure. The low risk score, proper DNS resolution to AWS hostname, and absence of blacklist entries confirm legitimate operation. No firewall rules or blocking recommended. If traffic is unexpected, investigate source context rather than the IP itself.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Sweden |
| ASN | AS16509 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-16-171-175-115.eu-north-1.compute.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-16-171-175-115.eu-north-1.compute.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| Closed Ports | 22, 25, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 24% | 2 | 3 |
| ownership | 24% | 2 | 3 |
| reputation | 31% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 25% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-19 03:35:06 UTC |
| Last Seen | 2026-06-28 08:17:04 UTC |
| Profile Built | 2026-06-29 02:22:40 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 25 |
Full dossier details are available via our API.