47.128.96.142📋 Copy

IP Intelligence Briefing: 47.128.96.142

Date: 2026-06-11

---

**1. Core Profile**

• Reputation: Moderate Risk (Risk Score: 50)
• Ownership:

- ASN: 16509 (Amazon Data Services Singapore)

- Organization: Amazon Web Services (AWS)

- Subnet: 47.128.0.0/14 (AMAZON-SIN)

• Geolocation:

- Country: Singapore (SG)

- Coordinates: 1.35°N, 103.82°E (±150km accuracy)

- Timezone: Asia/Singapore

• Network Role:

- Type: Cloud Compute (AWS EC2 instance)

- Services: No open ports or TLS certificates detected.

- Hosting: Yes (AWS infrastructure)

---

**2. Threat & Risk Analysis**

• Threat Indicators:

- No malicious indicators, spam, or known attacker associations.

- DNS: Resolves to `ec2-47-128-96-142.ap-southeast-1.compute.amazonaws.com` (AWS-managed).

- Subnet Risk: Abuse density of 23.81% (mixed classification).

• Neighbor Risk:

- Subnet: 47.128.96.142/24

- High-Risk Neighbors: 2 IPs (50 risk score).

- Total Neighbors: 27 (8 active, 5 flagged as risky).

---

**3. Historical Observations**

• Signal Trends:

- Stable ownership (no changes detected).

- No persistent malicious activity (threat observation count: 0).

- DNSSEC and route stability confirmed.

• Recent Activity:

- Last observed on 2026-06-11 (no significant changes noted).

---

**4. Relationships & Context**

• Linked Entities:

- DNS: Directly associated with AWS-managed EC2 instance.

- Network: Same subnet as other AWS infrastructure (AMAZON-SIN).

- No Malicious Associations: No linked domains, campaigns, or blacklists.

---

**5. Recommendations**

• Monitor Subnet: The 47.128.96.142/24 subnet has 23.81% abuse density. Investigate high-risk neighbors (e.g., 47.128.96.136, 47.128.96.175).
• Verify Cloud Activity: Confirm the IP’s legitimacy via AWS console or access logs.
• Baseline Behavior: No suspicious services or TLS activity detected; no immediate action required.

---

Conclusion: This IP is a legitimate AWS EC2 instance in Singapore. While no direct threats are detected, the subnet’s moderate abuse density warrants closer monitoring of adjacent IPs for potential lateral movement or compromised hosts.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.