# IP Intelligence Briefing: 144.31.79.223
## Executive Summary
IP address 144.31.79.223 is a low-risk residential/virtual hosting endpoint from u1host Finland (ASN213877). The IP exhibits minimal threat indicators and no active malicious campaigns. Recommended action: monitor with standard logging; no immediate blocking required.
## Ownership & Infrastructure
- Organization: u1host Finland (u1host-hel)
- ASN: 213877
- CIDR Block: 144.31.79.0/24
- Geolocation: Finland (61.92°N, 25.75°E), timezone Europe/Helsinki
- Service Profile: Firewalled / No Services detected
- Network Classification: Residential/virtual hosting endpoint
## Risk Assessment
- Overall Risk Score: 0 (Low Risk)
- Provider Score: 0
- Authority Score: 0
- Threat Indicators: None
- Blacklist Status: Not listed (0 DNSBL listings)
- Abuse Confidence: Not applicable
## Technical Observations
- DNS: vm799301.hosted-by.u1host.com
- PTR Record: vm799301.hosted-by.u1host.com
- Email Authentication: SPF enabled, DMARC enabled
- Open Ports: None detected
- TLS/HTTP: No services exposed
- ICMP: Blocked (unable to validate geolocation)
- Route Stability: Unstable (false)
## Neighborhood Context (144.31.79.0/24)
- Abuse Density: 0.5 (moderate)
- Subnet Classification: Mostly clean
- Threat Siblings: 1 out of 2 total IPs
- Notable Neighbor: 144.31.79.140 (risk score: 25, authority score: 50)
## Historical Signal Analysis
Recent observations show mixed geolocation signals:
- Finland: Confidence 0.28 (multi-signal inference)
- United States: Confidence 0.85 (AlienVault OTX source, 2 pulse matches)
- Ownership changes: 0
- Threat persistence: 0 days
- Persistently malicious: False
## Actionable Recommendations
1. Firewall: No blocking required. Standard logging recommended.
2. Monitoring: Observe for emerging threat indicators in neighborhood subnet.
3. Incident Response: Treat as benign unless new threat indicators emerge.
## Related Entities
- Hostnames: vm799301.hosted-by.u1host.com
- Network: u1host-hel
- Campaigns: None correlated
---
*Intel generated: 2026-07-29 | Data Source: IPDebrief Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | u1host Finland |
| ASN | AS213877 |
| Network Name | u1host-hel |
| CIDR Block | 144.31.79.0/24 |
| RIR | ARIN |
| Country | FI |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vm799301.hosted-by.u1host.com |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | vm799301.hosted-by.u1host.com |
๐ DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
๐ TLS Certificate
| SANs | n.sni-347-default.ssl.fastly.net |
| Valid From | 2025-09-17T05:11:14+00:00 |
| Valid Until | 2026-10-19T05:11:13+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 010E14325A75B0895550D1E8FF6F54F9 |
| Thumbprint | 5EC8F963AFB90CD09AAF2B88A2C676E90123EE2D |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-22 07:15:24 UTC |
| Last Seen | 2026-07-29 12:24:23 UTC |
| Profile Built | 2026-07-29 12:36:50 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.