140.82.28.70📋 Copy

# IP Intelligence Briefing: 140.82.28.70/32

Classification: Low Risk

Date Generated: Current

Analyst: SOC Intelligence Team

---

## Executive Summary

IP address 140.82.28.70 operates as a low-risk web server hosted on Vultr infrastructure (AS20473) in Miami, Florida. The IP demonstrates consistent "mostly_clean" classification with a risk score of 25/100. No active threat indicators or malicious campaigns are associated with this address. The environment supports standard web services (HTTP/HTTPS) and resolves to the domain icallsystems.com.

---

## Infrastructure Profile

---

## Network Services & DNS

• Open Ports: TCP/80 (HTTP), TCP/443 (HTTPS)
• Server Type: Apache
• DNS Resolution: 140.82.28.70.vultrusercontent.com
• TLS Certificate: Let's Encrypt (R12)
• Certificate Subject: icallsystems.com, office.icallsystems.com, www.icallsystems.com
• Email Authentication: SPF and DMARC records present

---

## Threat Intelligence Indicators

• Blacklist Status: 0 active blacklists
• DNSBL Listings: 1 out of 8 total lists
• Known Attacker: No
• Tor Exit Node: No
• Known Campaign: No
• Threat Persistence: None observed
• Abuse Confidence Score: Not applicable

---

## Subnet & Neighborhood Analysis

Subnet: 140.82.28.70/24

Abuse Density: 1 (minimal)

Classification: mostly_clean

Threat Siblings: 1

Active Siblings: 1

The immediate /24 subnet exhibits minimal abuse density with one active threat-related IP neighbor. The broader /23 block (140.82.28.0/23) contains the majority of network infrastructure.

---

## Historical Observations

• Total Observations: 22 signals recorded
• Observation Period: Recent activity tracked through June 2026
• Classification Trend: Consistent "mostly_clean" classification
• Ownership Changes: 0 (stable ownership)
• Threat Observation Count: 1 (isolated)
• Persistence Status: Not persistently malicious

Historical data indicates stable infrastructure with no significant risk escalation. The single threat observation remains isolated with no correlation to persistent malicious activity.

---

## Control Plane Assessment

• BGP Prefix: 140.82.24.0/21
• Route Stability: Not stable (route changes detected)
• RPKI State: Not determined
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)

---

## Recommended Actions

Based on the risk profile (25/100) and threat indicators (none active), the following actions are recommended:

1. Allow Standard Web Traffic: No firewall restrictions required for HTTP/HTTPS services

2. Monitor DNSBL: Review the single DNSBL listing periodically for changes

3. Subnet Awareness: Monitor the /24 subnet (140.82.28.0/24) for any escalation in abuse density

4. Certificate Renewal: TLS certificate valid through Let's Encrypt standard timeline

---

## Intelligence Conclusions

IP 140.82.28.70 represents a legitimate cloud hosting endpoint with minimal security concerns. The infrastructure supports standard web services for the icallsystems.com domain. No immediate threat mitigation is required, though routine monitoring of the associated subnet is recommended given the presence of one threat-related sibling IP.

Status: No Action Required

Threat Level: Low

Classification Confidence: High

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.