47.128.110.85📋 Copy

IP Intelligence Briefing: 47.128.110.85

Date: 2026-06-10

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Amazon Data Services Singapore (ASN 16509)
• Geolocation: Singapore (1.35°N, 103.82°E), 150km accuracy radius
• Network Role: AWS Cloud Compute instance (Firewalled / No Services)
• Threat Indicators: Clean (no malware, spam, or known attacker associations)

---

**2. Observation History**

• Geo Validation: ICMP blocked, leading to inferred location in Singapore.
• Stability: Low stability score (0), with inconsistent route tracking.
• Historical Signals:

- 2026-06-01: Traceroute failed due to ICMP blocking.

- 2026-06-01: DNSSEC valid, but operator score labeled "Basic."

- 2026-06-01: No active threats or services detected.

---

**3. Relationships**

• DNS Associations:

- `ec2-47-128-110-85.ap-southeast-1.compute.amazonaws.com` (AWS EC2 instance).

• Network Links:

- Subnet: `AMAZON-SIN` (AWS Singapore region).

- No direct links to malicious domains or organizations.

---

**4. Neighborhood Analysis**

• Subnet: 47.128.110.85/24
• Abuse Density: 0.1667 (low risk).
• Neighbors:

- 15 IPs flagged as "low risk," 2 with medium risk (scores 25–50).

- No high-risk or malicious neighbors detected.

---

**5. Recommendations**

• Monitoring: Track subnet activity due to low stability and mixed neighbor risk.
• AWS Configuration: Verify AWS EC2 instance security groups and access controls.
• Geolocation Validation: Consider alternative methods to validate IP location due to ICMP blocking.
• Threat Hunting: Correlate with medium-risk neighbors for potential lateral movement.

Conclusion: The IP is a legitimate AWS cloud instance with no immediate threat indicators. Monitor for anomalies in the subnet and ensure AWS infrastructure compliance.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.