# IP INTELLIGENCE BRIEFING
Target: 47.128.111.128/32
Classification: Low Risk β Cloud Infrastructure
Date: Current
Source: IPDebrief Intelligence Platform
---
## EXECUTIVE SUMMARY
IP 47.128.111.128 is a cloud endpoint registered to Amazon Web Services Singapore (AS16509, AMAZON-SIN network). The address demonstrates clean threat indicators, no malicious activity, and belongs to a subnet with predominantly benign traffic patterns. No immediate defensive action required.
---
## OWNERSHIP & INFRASTRUCTURE
| Attribute | Value |
|---|---|
| **Organization** | Amazon Data Services Singapore |
| **ASN** | 16509 |
| **CIDR Block** | 47.128.0.0/14 |
| **Network Name** | AMAZON-SIN |
| **RIR** | ARIN |
| **Infrastructure Type** | Cloud Provider (EC2) |
| **Registration** | Standard AWS EC2 allocation |
The IP resolves to `ec2-47-128-111-128.ap-southeast-1.compute.amazonaws.com`, confirming AWS East Asia (Singapore) region placement.
---
## GEOLOCATION
- Country: Singapore (SG)
- Coordinates: 1.35°N, 103.82°E
- Timezone: Asia/Singapore
- GeoValidation: Plausibility flag not confirmed
---
## THREAT ASSESSMENT
| Metric | Status |
|---|---|
| **Overall Risk Score** | 0 (Low Risk) |
| **Abuse Confidence** | None |
| **Blacklist Count** | 0 |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Tor Exit Node** | No |
| **Active Campaigns** | None |
| **Threat Feeds** | None |
No threat indicators detected across all monitoring sources.
---
## NETWORK CHARACTERISTICS
- Open Ports: None detected
- HTTP/HTTPS Services: None
- DNSSEC: Valid
- Anycast: No
- BGP Prefix: 47.128.0.0/14
- Route Stability: Unstable
---
## NEIGHBORHOOD ANALYSIS (47.128.111.0/24)
| Metric | Value |
|---|---|
| **Total Siblings** | 52 |
| **Active Siblings** | 51 |
| **Threat Siblings** | 5 |
| **Abuse Density** | 0.0962 (Low) |
| **Classification** | Mostly Clean |
| **Risk Distribution** | 0 High / 1 Medium / 50 Low |
The /24 subnet shows predominantly benign activity. Only 1 medium-risk neighbor detected among 51 active IPs.
---
## OBSERVATION HISTORY
- Total Observations: 18 signals
- Latest Activity: 2026-08-05
- Threat Persistence: 0 days
- Ownership Changes: 0
- Status: No persistent malicious behavior detected
Recent observations consistently classify the IP as "mostly_clean" with inherited risk scores of 3.
---
## RELATIONSHIP MAPPING
- Primary Network: AMAZON-SIN (47.128.0.0/14)
- Associated Hostname: ec2-47-128-111-128.ap-southeast-1.compute.amazonaws.com
- DNS Associations: Confirmed forward resolution
---
## SECURITY RECOMMENDATIONS
No immediate defensive action required. This IP represents standard AWS cloud infrastructure with no malicious indicators. If traffic is observed from this address:
1. Allow traffic through if it matches legitimate AWS service patterns
2. Monitor for unusual connection attempts given the subnet's 5 threat siblings
3. No firewall blocking recommended due to low-risk classification
---
## CONCLUSION
47.128.111.128 is a benign AWS EC2 endpoint in Singapore with no threat indicators. The subnet environment is predominantly clean. No SOC alert or defensive action is warranted unless specific operational context suggests otherwise.
Status: CLEAR FOR MONITORING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Singapore |
| ASN | AS16509 |
| Network Name | AMAZON-SIN |
| CIDR Block | 47.128.0.0/14 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-47-128-111-128.ap-southeast-1.compute.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-47-128-111-128.ap-southeast-1.compute.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 1 | 1 |
| routing | 17% | 1 | 1 |
| services | 17% | 1 | 1 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 1 |
| geolocation | 17% | 1 | 1 |
| Overall | 20% | 7 | 8 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-24 08:18:52 UTC |
| Last Seen | 2026-08-12 18:31:24 UTC |
| Profile Built | 2026-08-05 22:48:03 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 21 |
Full dossier details are available via our API.