IPDebrief

144.31.79.223

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 144.31.79.223

## Executive Summary

IP address 144.31.79.223 is a low-risk residential/virtual hosting endpoint from u1host Finland (ASN213877). The IP exhibits minimal threat indicators and no active malicious campaigns. Recommended action: monitor with standard logging; no immediate blocking required.

## Ownership & Infrastructure

## Risk Assessment

## Technical Observations

## Neighborhood Context (144.31.79.0/24)

## Historical Signal Analysis

Recent observations show mixed geolocation signals:

## Actionable Recommendations

1. Firewall: No blocking required. Standard logging recommended.

2. Monitoring: Observe for emerging threat indicators in neighborhood subnet.

3. Incident Response: Treat as benign unless new threat indicators emerge.

## Related Entities

---

*Intel generated: 2026-07-29 | Data Source: IPDebrief Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ซ๐Ÿ‡ฎ Finland
Regionโ€”
CityNewark
TimezoneEurope/Helsinki
Latitudeโ€”
Longitudeโ€”

๐Ÿข Ownership & Registration

Organizationu1host Finland
ASNAS213877
Network Nameu1host-hel
CIDR Block144.31.79.0/24
RIRARIN
CountryFI
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRvm799301.hosted-by.u1host.com
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnamesvm799301.hosted-by.u1host.com

๐Ÿ” DNS Hygiene

Hygiene Score60% (Good)
SPFPresent
DMARCPresent
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierUnknown โ€” Insufficient routing data to classify
No specific classification

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
443httpstcpโ€”
22sshtcp
Closed Ports25, 80, 3389, 8080, 8443 (2 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18

๐Ÿ” TLS Certificate

๐Ÿ”’
CN=n.sni-347-default.ssl.fastly.net
Issued by CN=GlobalSign Atlas R3 DV TLS CA 2025 Q3, O=GlobalSign nv-sa, C=BE
Self-signed: No
SANsn.sni-347-default.ssl.fastly.net
Valid From2025-09-17T05:11:14+00:00
Valid Until2026-10-19T05:11:13+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_128_GCM_SHA256
Signature Algorithmsha256RSA
Validity Period396 days
Serial Number010E14325A75B0895550D1E8FF6F54F9
Thumbprint5EC8F963AFB90CD09AAF2B88A2C676E90123EE2D

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
11
routing
25%
11
services
25%
11
ownership
25%
12
reputation
0%
00
geolocation
0%
00
Overall16%45
Coverage: 4/6 dimensions ยท Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-22 07:15:24 UTC
Last Seen2026-07-29 12:24:23 UTC
Profile Built2026-07-29 12:36:50 UTC
Data FreshnessLive
Signal Types23
Total Observations23
๐Ÿ” 23 signal types ยท 23 observations collected
This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.