140.99.130.224📋 Copy

IP INTELLIGENCE BRIEFING

Target: 140.99.130.224/32

Classification: LOW RISK / INFRASTRUCTURE

Date: 2026-06-26

---

EXECUTIVE SUMMARY

IP 140.99.130.224 presents as a low-risk infrastructure endpoint with a reputation score of 25/100. The address is owned by Internet Utilities NA LLC (ASN 212238) and registered under the Oakland, CA geolocation. No active threat indicators were identified, with zero open ports detected on the host.

OWNERSHIP & NETWORK CLASSIFICATION

• Organization: Internet Utilities NA LLC
• ASN: 212238
• CIDR Block: 140.99.130.0/24
• Network Classification: Not a CDN, VPN, proxy, Tor exit, or hosting service
• Service Status: Firewalled / No Services exposed
• IP Reputation: Low Risk

GEOLOCATION VALIDATION

• Claimed Location: Oakland, CA, US
• Validation Status: Geo-plausible (5 probe samples)
• Distance Anomaly: 10,382.9 km reported distance from claimed coordinates
• Minimum Possible RTT: 207.7ms
• Average RTT: 260.4ms
• Note: Significant distance discrepancy warrants geographic validation against connection logs

THREAT INDICATORS

• Blacklist Status: Listed on 1 of 8 DNS blacklist feeds (high severity)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Correlation: 0 associated campaigns
• Abuse Confidence: Low

NEIGHBORHOOD ANALYSIS

• Subnet Abuse Density: 0% (clean)
• Classification: Mostly clean
• Threat Siblings in /24: 1
• Active Siblings: 0
• Risk Distribution: No high or medium risk neighbors detected

OBSERVATION HISTORY

• Total Observations: 19
• Recent Activity: DNS blacklist activity observed June 2026 (1 of 8 lists)
• Historical ASN Signals: AS7029 Windstream Communications LLC referenced in historical data
• Persistence: Not persistently malicious

RELATIONSHIP GRAPH

• Related Entities: 14 relationships identified
• Primary Association: NETUTILS network
• Connection Type: Same Network relationships

RECOMMENDED ACTIONS

• Risk Score: 25 (Low Risk)
• Firewall Action: No immediate blocking required
• Monitoring: Monitor for changes in blacklist status or service exposure
• Investigation Priority: Low

SOC ANALYST NOTES

1. The IP maintains a low-risk posture with no active threat indicators

2. DNS blacklist listing (1 of 8) should be verified for current relevance

3. Geographic distance anomaly (claimed Oakland vs. 10,382 km distance) may indicate routing anomalies or misconfiguration

4. The /24 subnet shows minimal abuse density; threat sibling of 1 should be investigated for potential lateral relationships

5. No services detected; IP appears to be a passive endpoint with firewall protection

FINAL ASSESSMENT

This IP address represents a low-risk infrastructure endpoint with minimal threat activity. Standard monitoring procedures are recommended without immediate blocking actions.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.