# IP INTELLIGENCE BRIEFING: 47.128.111.111/32
Classification: LOW RISK - AWS Cloud Infrastructure
Date: 2026-08-05
Analyst: SOC Intelligence Team
---
## EXECUTIVE SUMMARY
IP 47.128.111.111 is a legitimate Amazon Web Services (AWS) cloud infrastructure endpoint located in Singapore. The IP exhibits low-risk characteristics with no active threat indicators, no malicious reputation, and no service exposure. No defensive action is required.
---
## TECHNICAL PROFILE
| Attribute | Value |
|---|---|
| **Risk Score** | 25/100 |
| **Reputation** | Low Risk |
| **ASN** | 16509 (AMAZON-AES) |
| **Organization** | Amazon Data Services Singapore |
| **Location** | Singapore (ap-southeast-1) |
| **CIDR Block** | 47.128.0.0/14 |
| **Network Role** | Cloud Provider (Firewalled) |
---
## THREAT ASSESSMENT
Threat Indicators: None detected
- No known attacker status
- Not associated with Tor exit nodes
- Not flagged as spam source
- Zero blacklist entries
- No campaign correlations
Service Exposure: None
- No open ports detected
- No TLS certificates
- No HTTP services
- No banner information
---
## INFRASTRUCTURE ANALYSIS
DNS Resolution:
- PTR Hostname: ec2-47-128-111-111.ap-southeast-1.compute.amazonaws.com
- Forward Resolution: Confirmed to amazonaws.com
- Email Authentication: SPF and DMARC records present
Network Context:
- Subnet: 47.128.111.111/24
- Subnet Abuse Density: 9.62%
- Classification: mostly_clean
- Active Neighbors: 37/52
- Threat Neighbors: 5
---
## OBSERVATION HISTORY
Historical Activity: 23 observations recorded
- Recent Activity: 2026-08-05
- Threat Persistence: None detected
- Ownership Changes: None
- Status: Stable, persistent AWS infrastructure
---
## RELATIONSHIP GRAPH
Primary Associations:
- DNS: ec2-47-128-111-111.ap-southeast-1.compute.amazonaws.com
- Network: AMAZON-SIN (AMAZON-SIN network)
- Multiple DNS and network associations confirm AWS infrastructure
---
## RECOMMENDATION
Action: No defensive action required.
Rationale: This IP is a standard AWS cloud endpoint with no malicious indicators, no service exposure, and established infrastructure patterns. The IP belongs to a clean subnet with minimal abuse density. Treat as legitimate cloud infrastructure.
Note: Monitor for any changes in reputation or service exposure, though current profile indicates stable, benign AWS infrastructure.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Singapore |
| ASN | AS16509 |
| Network Name | AMAZON-SIN |
| CIDR Block | 47.128.0.0/14 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-47-128-111-111.ap-southeast-1.compute.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-47-128-111-111.ap-southeast-1.compute.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 43% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 28% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-28 04:03:16 UTC |
| Last Seen | 2026-08-12 22:17:19 UTC |
| Profile Built | 2026-08-12 22:27:05 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.