# 47.128.121.111 — IP Intelligence Summary 47.128.121.111 is an IPv4 address operated by Amazon Data Services Singapore (AS16509), geolocated to Singapore, Singapore. It belongs to datacenter or hosting infrastructure with reverse DNS name ec2-47-128-121-111.ap-southeast-1.compute.amazonaws.com. As of October 7, 2026, IPDebrief rates it Moderate Risk (50/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/47.128.121.111 - Last updated: 2026-10-07 ## Ownership - Organization: Amazon Data Services Singapore - Network name: AMAZON-SIN - Allocated block: 47.128.0.0/14 - ASN: AS16509 (https://ipdebrief.com/asn/16509) - Regional registry: ARIN - Cloud / hosting provider: Amazon Web Services ## Location - City: Singapore - Region: SG - Country: Singapore - Time zone: Asia/Singapore ## Network classification - Infrastructure type: CloudCompute - Datacenter / hosting: yes - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Moderate Risk (50/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - ec2-47-128-121-111.ap-southeast-1.compute.amazonaws.com - Forward-confirmed: yes ## Analyst narrative \# IP Intelligence Briefing: 47.128.121.111 **Classification:** LOW RISK - Cloud Infrastructure (AWS EC2) **Date Generated:** 2026-08-04 **Analyst:** IPDebrief Intelligence System \--- \## Executive Summary IP address 47.128.121.111 is a low-risk cloud compute resource operated by Amazon Web Services. The asset is a standard EC2 instance hosted in the Singapore region (ap-southeast-1) with no active threat indicators or malicious activity detected. The IP maintains a risk score of 25/100 and exhibits normal cloud infrastructure behavior. \--- \## Ownership & Infrastructure Profile | Attribute | Value | |-----------|-------| | **ASN** | 16509 (Amazon Data Services Singapore) | | **Organization** | AMAZON-SIN | | **CIDR Block** | 47.128.0.0/14 | | **Network Role** | Cloud Compute (AWS EC2) | | **Infrastructure Type** | CloudCompute | | **Location** | Singapore (1.35°N, 103.82°E) | | **Timezone** | Asia/Singapore | | **Geolocation Confidence** | High (Consensus: True) | **DNS Resolution:** Forward confirmed to \`ec2-47-128-121-111.ap-southeast-1.compute.amazonaws.com\` with reverse DNS matching. \--- \## Threat Assessment \### Current Risk Profile \- **Overall Risk Score:** 25/100 (Low Risk) \- **Abuse Confidence:** Not applicable \- **Threat Indicators:** None detected \- **Blacklist Status:** Clean (0 listings) \- **Known Attacker:** No \- **Spam Source:** No \- **Tor Exit Node:** No \### Service & Port Analysis \- **Open Ports:** None detected \- **HTTP/HTTPS:** No active services \- **TLS Certificate:** None \- **Banner Scanning:** No service banners detected \- **Connection Status:** Firewalled / No Services \--- \## Neighborhood Analysis (47.128.121.0/24) | Metric | Value | |--------|-------| | **Total Siblings** | 104 IPs | | **Active Siblings** | 80 IPs | | **Threat Siblings** | 15 IPs | | **Abuse Density** | 14.42% | | **Classification** | Mostly Clean | | **Inherited Risk** | 5/100 | **Risk Distribution in Subnet:** \- High Risk: 0 IPs \- Medium Risk: 3 IPs \- Low Risk: 93 IPs The subnet demonstrates normal cloud provider behavior with minimal malicious activity. The target IP's risk profile aligns with the neighborhood baseline. \--- \## Observation History (22 Signals) \### Recent Activity (Last 7 Days) \- **Traceroute Probes:** Multiple attempts, target unreachable (29 hops max) \- **Port Scans:** Completed with no open ports detected \- **Banner Analysis:** No service banners identified \- **Certificate Analysis:** No SSL/TLS certificates \- **Geolocation Signals:** Consistently resolved to Singapore \- **Campaign Correlation:** None (0 correlated IPs) \### Temporal Analysis \- **Ownership Changes:** 0 (Stable) \- **Threat Persistence:** 0 days \- **Threat Observation Count:** 0 \- **Persistence Status:** Not persistently malicious \- **Route Stability:** False (normal for cloud environments) \--- \## Relationship Graph **Primary Associations:** \- **Network:** AMAZON-SIN (Multiple relationship entries) \- **Hostname:** ec2-47-128-121-111.ap-southeast-1.compute.amazonaws.com (DNS Association) The relationship profile confirms standard AWS infrastructure topology with no anomalous external associations. \--- \## Recommended Security Actions **Current Status:** No actionable recommendations required. **Firewall Rules:** Not applicable (low-risk cloud infrastructure) **SOC Guidance:** 1. **Allow Traffic:** Standard inbound/outbound rules for AWS cloud services 2. **Monitoring:** No special monitoring required beyond baseline 3. **Threat Hunt:** No immediate threat indicators warrant investigation 4. **Incident Response:** Treat as benign infrastructure \--- \## Control Plane Data | Metric | Value | |--------|-------| | **Origin ASN** | 16509 | | **BGP Prefix** | 47.128.0.0/14 | | **RPKI State** | Not evaluated | | **IRR Consistency** | Not evaluated | | **Route Changes (30d)** | 0 | | **Route Stability** | False | | **DNSSEC Valid** | True | | **DNSBL Listed** | 1/8 lists | | **Operator Score** | 0 | \--- \## Conclusion IP 47.128.121.111 is a legitimate AWS EC2 instance in the Singapore region with no malicious activity. The asset operates within normal cloud infrastructure parameters, exhibits stable ownership, and maintains a clean threat profile. No defensive actions are required beyond standard cloud security policies. **Threat Level:** LOW **Recommended Action:** MONITOR (Standard baseline) **Confidence:** HIGH (Based on 22 historical observations) \--- *Report generated by IPDebrief Intelligence System | Authorized for SOC use* ## Nearby addresses - 47.128.121.6 (https://ipdebrief.com/47.128.121.6) - 47.128.121.7 (https://ipdebrief.com/47.128.121.7) - 47.128.121.8 (https://ipdebrief.com/47.128.121.8) - 47.128.121.9 (https://ipdebrief.com/47.128.121.9) - 47.128.121.12 (https://ipdebrief.com/47.128.121.12) - 47.128.121.13 (https://ipdebrief.com/47.128.121.13) - 47.128.121.14 (https://ipdebrief.com/47.128.121.14) - 47.128.121.16 (https://ipdebrief.com/47.128.121.16) - 47.128.121.17 (https://ipdebrief.com/47.128.121.17) - 47.128.121.18 (https://ipdebrief.com/47.128.121.18) - 47.128.121.19 (https://ipdebrief.com/47.128.121.19) - 47.128.121.52 (https://ipdebrief.com/47.128.121.52) --- Source: IPDebrief, "47.128.121.111 IP intelligence", https://ipdebrief.com/47.128.121.111, updated 2026-10-07. Assessments are probabilistic.