# 47.128.16.158 — IP Intelligence Summary

47.128.16.158 is an IPv4 address operated by Amazon Data Services Singapore (AS16509), geolocated to Singapore, Singapore. It belongs to datacenter or hosting infrastructure with reverse DNS name ec2-47-128-16-158.ap-southeast-1.compute.amazonaws.com. As of October 8, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/47.128.16.158
- Last updated: 2026-10-08

## Ownership

- Organization: Amazon Data Services Singapore
- Network name: AMAZON-SIN
- Allocated block: 47.128.0.0/14
- ASN: AS16509 (https://ipdebrief.com/asn/16509)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Singapore
- Region: SG
- Country: Singapore
- Time zone: Asia/Singapore

## Network classification

- Infrastructure type: —
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ec2-47-128-16-158.ap-southeast-1.compute.amazonaws.com
- Forward-confirmed: yes

## Analyst narrative

\# IPDEBRIEF INTELLIGENCE BRIEFING

**Target IP:** 47.128.16.158/32

**Date:** Current

**Classification:** LOW RISK – Cloud Infrastructure

\---

\## Executive Summary

IP address 47.128.16.158 is a low-risk AWS EC2 instance hosted in Singapore (ap-southeast-1). The asset belongs to Amazon Data Services Singapore (ASN 16509, AMAZON-SIN) and exhibits no malicious indicators. Comprehensive analysis of threat feeds, blacklists, and observation history reveals no evidence of abuse or compromise.

\---

\## Risk Assessment

\- **Overall Risk Score:** 25 (Low Risk)

\- **Provider Score:** 0 (Trusted Provider)

\- **Authority Score:** 0 (No Abuse Authority)

\- **Stability:** Stable ownership pattern

\- **Blacklist Status:** Not listed on any threat feeds (0/8 DNSBL checks)

\- **Known Campaigns:** None correlated

\---

\## Technical Profile

| Attribute | Value |

|-----------|-------|

| **Geolocation** | Singapore, SG |

| **ASN/Provider** | 16509 / Amazon Web Services |

| **Infrastructure** | Cloud Compute (AWS EC2) |

| **DNS Resolution** | ec2-47-128-16-158.ap-southeast-1.compute.amazonaws.com |

| **CIDR Block** | 47.128.0.0/14 |

| **Reverse DNS** | Forward confirmed |

| **Open Services** | None detected (firewalled) |

| **TLS/Certificates** | No public certificates |

\---

\## Threat Indicators

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Abuse Confidence:** Not applicable

\- **Threat Feeds:** Zero matches

\- **Campaign Likelihood:** None observed

\---

\## Neighborhood Analysis

**Subnet:** 47.128.16.0/24

\- **Total Siblings:** 22

\- **Active Siblings:** 14

\- **Abuse Density:** 0%

\- **Risk Distribution:** 21 low-risk, 0 medium, 0 high-risk

\- **Classification:** Clean subnet with no inherited threat patterns

Neighbor IPs show consistent low-risk profiles with authority scores of 60, indicating legitimate AWS cloud infrastructure.

\---

\## Historical Observation

**Total Observations:** 19

\- **Recent Activity:** Consistent DNS and geolocation signals since July 2026

\- **Threat Persistence:** 0 days

\- **Ownership Changes:** 0 (stable)

\- **Pattern:** No escalation of risk indicators over observation period

\- **DNS Listings:** 8 total DNSBL checks with 0 listings in latest observation (previously 1 high-severity listing in July 2026)

\---

\## Relationship Graph

\- **DNS Associations:** 6 entries to ec2-47-128-16-158.ap-southeast-1.compute.amazonaws.com

\- **Network Associations:** 8 entries to AMAZON-SIN network

\- **No external correlations:** No links to malicious organizations, certificates, or subnets outside AWS infrastructure

\---

\## Recommended Actions

**Current Risk Level:** LOW

**Recommended Action:** NO ACTION REQUIRED

No firewall rules or blocking recommendations. The IP represents legitimate cloud infrastructure with no observable malicious activity. Standard monitoring practices apply.

\---

\## Intelligence Summary

This IP address is clean cloud infrastructure. The low risk score (25), zero blacklist entries, stable ownership, and clean neighborhood profile indicate normal AWS EC2 operation. No threat intelligence, attack patterns, or abuse indicators were detected during comprehensive analysis. SOC teams may treat this as a benign asset requiring no special handling beyond standard network operations monitoring.

## Nearby addresses

- 47.128.16.112 (https://ipdebrief.com/47.128.16.112)
- 47.128.16.115 (https://ipdebrief.com/47.128.16.115)
- 47.128.16.120 (https://ipdebrief.com/47.128.16.120)
- 47.128.16.121 (https://ipdebrief.com/47.128.16.121)
- 47.128.16.124 (https://ipdebrief.com/47.128.16.124)
- 47.128.16.126 (https://ipdebrief.com/47.128.16.126)
- 47.128.16.128 (https://ipdebrief.com/47.128.16.128)
- 47.128.16.131 (https://ipdebrief.com/47.128.16.131)
- 47.128.16.133 (https://ipdebrief.com/47.128.16.133)
- 47.128.16.134 (https://ipdebrief.com/47.128.16.134)
- 47.128.16.137 (https://ipdebrief.com/47.128.16.137)
- 47.128.16.141 (https://ipdebrief.com/47.128.16.141)

---

Source: IPDebrief, "47.128.16.158 IP intelligence", https://ipdebrief.com/47.128.16.158, updated 2026-10-08. Assessments are probabilistic.