47.128.112.210📋 Copy

# IP Intelligence Briefing: 47.128.112.210/32

Classification: Moderate Risk — Cloud Infrastructure

Date: June 25, 2026

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 47.128.112.210 is an Amazon Web Services (AWS) EC2 instance deployed in Singapore (ap-southeast-1). The IP carries a moderate risk score of 40/100 and is associated with high-abuse subnet characteristics. No active malicious indicators were identified. The address is properly classified as cloud compute infrastructure with no open services detected.

---

## Infrastructure Profile

Ownership & Registration:

• ASN: 16509 (Amazon.com, Inc.)
• Organization: Amazon Data Services Singapore
• Provider: Amazon Web Services
• Infrastructure Type: CloudCompute
• CIDR Block: 47.128.0.0/14

Geolocation:

• Country: Singapore (SG)
• City: Singapore
• Coordinates: 1.35°N, 103.82°E
• Accuracy: ±100 km
• GeoValidation: Consensus confirmed (1 source)

DNS Resolution:

• PTR Hostname: ec2-47-128-112-210.ap-southeast-1.compute.amazonaws.com
• Forward Resolution: Confirmed (amazonaws.com)
• Email Authentication: SPF and DMARC records present
• Forward Hostnames: 1 resolved entry

Network Classification:

• Is Cloud: Yes
• Is CDN: No
• Is Proxy/Tor/VPN: No
• Is Hosting: Yes
• Service Status: Firewalled / No Services (no open ports)

---

## Threat Assessment

Risk Score: 40/100 (Moderate Risk)

• Provider Score: 0
• Authority Score: 0
• Stability Score: 0

Threat Indicators:

• Abuse Confidence Score: Not available
• Blacklist Status: Listed on 1 of 8 DNS blacklists
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None detected

Control Plane Data:

• BGP Prefix: 47.128.0.0/14
• Route Stability: False (route changes observed)
• Route Changes (30d): 0
• RPKI State: Not reported
• DNSSEC Valid: Yes

---

## Subnet Neighborhood Analysis

Subnet: 47.128.112.0/24

• Total Siblings: 100
• Active Siblings: 81
• Threat Siblings: 69
• Abuse Density: 0.69 (High Abuse Classification)
• Inherited Risk Score: 27

Risk Distribution in Subnet:

• High Risk: 0
• Medium Risk: 97
• Low Risk: 2

The subnet exhibits elevated abuse activity with approximately 69% of active addresses flagged as threat sources. However, the target IP itself maintains a standard cloud compute profile with no active threat indicators.

---

## Historical Observations

Total Signals: 24 observations recorded

Observation Window: June 25, 2026

Recent Signal Summary:

• Subnet Abuse Density: 0.69 (High) — observed 06:45:50 UTC
• Network Classification: Cloud (AWS) — observed 06:43:20 UTC
• Geolocation: Singapore — observed 06:39:44 UTC
• Operator Score: 0 (Minimal) — observed 06:37:36 UTC
• Overall Profile Confidence: 0.1969 — observed 06:37:36 UTC

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 1
• Persistently Malicious: No

---

## Relationship Graph

Total Relationships: 61 entities linked

Key Associations:

• Network Affiliations: Multiple relationships to AMAZON-SIN network
• DNS Associations: ec2-47-128-112-210.ap-southeast-1.compute.amazonaws.com (verified)
• Certificate Matches: None
• Campaign Correlations: None
• Correlated IPs: None detected

---

## Recommended Actions

Current Risk Level: LOW-MODERATE

Firewall Recommendations:

• No blocking required based on current threat profile
• Standard cloud infrastructure egress/ingress rules apply
• Monitor for service enumeration or port scanning activity

Detection Considerations:

• This IP is a legitimate AWS EC2 instance with standard hosting classification
• Elevated neighborhood abuse density warrants contextual awareness but does not indicate malicious behavior
• No active threat indicators present

Monitoring Priority: LOW

Notes: The IP's moderate risk score (40) is primarily derived from its location within a high-abuse-density subnet rather than direct malicious activity. Standard cloud provider infrastructure is frequently observed in such environments.

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.