47.128.96.136📋 Copy

IP Intelligence Briefing: 47.128.96.136

Date: June 11, 2026

---

**1. IP Profile**

• Risk Score: 50 (Moderate Risk)
• Provider: Amazon Web Services (AWS)
• Geolocation: Singapore (SG)
• Ownership: Amazon Data Services Singapore (ASN 16509)
• Network Role: Cloud Compute (AWS EC2 instance)
• Threat Indicators: No direct malicious activity detected.

Key Observations:

• The IP is associated with an AWS EC2 instance (`ec2-47-128-96-136.ap-southeast-1.compute.amazonaws.com`).
• No open ports, TLS certificates, or services detected.
• Geolocation data aligns with AWS's regional infrastructure.
• Subnet abuse density: 35.7% (moderate risk).

---

**2. Observation History**

• Latest Activity: June 11, 2026 (1 observation).
• Trends: No significant changes in risk or threat signals.
• Subnet Stability: Route stability score indicates potential instability.

---

**3. Relationships**

• DNS Associations:

- `ec2-47-128-96-136.ap-southeast-1.compute.amazonaws.com` (AWS EC2).

• Network Links:

- Linked to AWS ASN 16509 ("AMAZON-SIN") and subnet `47.128.96.136/24`.

• No Malicious Connections: No ties to known threat feeds or malicious domains.

---

**4. Neighborhood Analysis**

• Subnet: `47.128.96.136/24` (28 IPs total).
• Active IPs: 11 (39% of subnet).
• Threat Siblings: 10 IPs flagged as high/medium risk.
• Abuse Density: 35.7% (moderate).
• Notable Neighbors:

- 47.128.96.170: Risk score 50 (moderate).

- 47.128.96.175: Risk score 25 (low).

- 47.128.96.197: Risk score 0 (low).

---

**5. Recommendations**

• Monitor Subnet: The subnet has a moderate abuse density; investigate neighboring IPs with higher risk scores.
• Check AWS Logs: Verify if the EC2 instance is compromised or exhibiting unusual behavior.
• Block High-Risk Neighbors: Consider isolating or blocking IPs like 47.128.96.170 if they are not part of legitimate AWS infrastructure.
• Enable Threat Intelligence Feeds: Use DNSBL lists to monitor the subnet for further threats.

Conclusion: This IP is a legitimate AWS compute instance but resides in a subnet with mixed risk. While no direct threats are detected, the subnet’s abuse density warrants closer scrutiny.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.