149.28.139.230📋 Copy

# IP Intelligence Briefing: 149.28.139.230

Classification: Low Risk / Cloud Infrastructure

Date: 2026-08-06

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 149.28.139.230 is classified as low-risk and operates within Vultr Holdings, LLC cloud infrastructure. The address exhibits no active threat indicators, no open services, and maintains a clean reputation across multiple threat feeds. No immediate blocking or firewall recommendations are warranted based on current intelligence.

---

## Network Profile

Ownership:

• Organization: Vultr Holdings, LLC
• ASN: 20473
• CIDR Block: 149.28.138.0/23
• RIR: ARIN
• Abuse Contact: Available via RDAP

Geolocation:

• Country: Singapore (SG)
• Coordinates: 1.314°N, 103.6839°E
• Accuracy Radius: 2,500 km
• GeoValidation: Plausible (validated via 5 probes)

Infrastructure Classification:

• Type: CloudCompute
• Hosting: Enabled
• CDN: No
• Proxy/Tor: No
• Mobile/Residential: No

---

## Threat Indicators

Current Risk Assessment:

• Risk Score: 0/100
• Abuse Confidence Score: None
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Threat Feeds: No active correlations detected across Pulsedive and other monitored threat feeds.

Campaign Correlation: No match to known malware campaigns or coordinated attack groups.

---

## Observation History

Total Observations: 19 signals recorded

Recent Activity (2026-08-06):

• 05:01:24 – Subnet abuse density: 1 (low), Classification: mostly_clean, Inherited risk: 2
• 05:00:55 – Traceroute validation: 249ms average RTT, 10,369 km distance (plausible)
• 05:00:48 – Geolocation: US (lower confidence: 0.35), conflicting with Singapore consensus
• 04:59:46 – Ownership persistence: 0 changes, 1 threat observation, not persistently malicious
• 04:59:14 – Organization confirmed: Vultr Holdings, LLC

Temporal Analysis: No persistent malicious behavior detected. The IP has demonstrated stability with ownership changes at 0 over the observation period.

---

## Network Relationships

DNS Associations:

• Forward Resolution: 149.28.139.230.vultrusercontent.com
• PTR Record: 149.28.139.230.vultrusercontent.com
• Forward Confirmed: No

Network Relationships:

• Same Network: NET-149-28-138-0-23 (Vultr network block)
• Relationship Count: 7 total (multiple entries for same network and DNS associations)

---

## Neighborhood Analysis

Subnet: 149.28.139.230/24

• Abuse Density: 0/100 (clean)
• Classification: mostly_clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 1

The /24 subnet shows minimal abuse activity with only one threat sibling identified, indicating the broader network environment is largely benign.

---

## Service Analysis

Open Ports: None detected

HTTP/TLS Services: No active services

TLS Certificate: None

Banner Grab: No server banner captured

The IP appears to be firewalled or configured without accessible services from the outside.

---

## Recommended Actions

Security Posture: No immediate action required.

Firewall Rules: Not recommended based on current risk profile.

Monitoring: Standard monitoring appropriate. No blocking or rate-limiting necessary.

---

## Intelligence Assessment

The IP address 149.28.139.230 represents a legitimate cloud computing resource within Vultr's Singapore infrastructure. The absence of open services, combined with zero blacklist entries and no threat feed correlations, suggests this IP is either:

1. A backend infrastructure endpoint with no public-facing services

2. A misconfigured or unused address

3. A legitimate cloud resource under normal operational parameters

Threat Level: LOW

Action: Monitor; no blocking required

Confidence: HIGH

---

*Report generated by IPDebrief Intelligence Platform. Data timestamps: 2026-08-06*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.