205.185.121.17
205.185.121.17 is an IPv4 address operated by FranTech Solutions (AS53667), geolocated to Las Vegas, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name mail.ftpvpn.info. As of October 15, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
IP INTELLIGENCE BRIEFING: 205.185.121.17/32
Executive Summary:
Target 205.185.121.17 is a low-risk (score: 25/100) infrastructure IP hosted by FranTech Solutions (BuyVM) on ASN 53667. The address is associated with colocation hosting infrastructure in Las Vegas, Nevada, with minimal threat indicators observed. No active malicious campaigns or known attacker associations detected.
Ownership and Infrastructure:
- Organization: FranTech Solutions (Frantech/BuyVM)
- ASN: 53667 (PONYNET-03, CIDR: 205.185.112.0/20)
- Infrastructure Type: Colocation Hosting
- Network Role: Single-Service Host
- Geographic Location: United States, Nevada (Las Vegas area)
- Registration: ARIN registry
Network Services and DNS:
- Open Ports: TCP/3389 (RDP) - potential remote access target
- PTR Record: mail.ftpvpn.info
- Forward Resolution: mail.ftpvpn.info (single record)
- No SPF or DMARC records configured for associated domain
- No TLS certificates or HTTP services detected on primary ports
Threat Assessment:
- Overall Risk: Low (25/100)
- Abuse Confidence: Not applicable
- Blacklist Status: Listed on 1 of 8 DNSBLs (max severity: high)
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Persistent Malicious Activity: No observed
Observation History:
23 historical observations recorded. Recent activity shows:
- Subnet abuse density: 0.2 (classification: mostly_clean)
- DNS listings detected in Aug 2026 (8 total lists, 1 current listing)
- No significant risk escalation over observation period
- Ownership changes: 0
Neighborhood Analysis:
/24 subnet (205.185.121.0/24) contains 5 active sibling IPs:
- Abuse Density: 0.0
- Risk Distribution: 0 high, 4 medium, 0 low
- Neighbor IPs with elevated scores:
- 205.185.121.3 (risk: 40)
- 205.185.121.164 (risk: 49)
- 205.185.121.170 (risk: 49)
- 205.185.121.177 (risk: 49)
Relationships:
- Network Association: PONYNET-03 (multiple entries)
- DNS Association: mail.ftpvpn.info (primary hostname)
- No additional organizational or certificate relationships identified
Recommended Actions:
No immediate blocking actions recommended. The IP presents a low-risk profile consistent with legitimate hosting infrastructure. However, the open RDP port (3389) may warrant monitoring for brute force attempts. Network defenders should evaluate based on broader context and organizational threat intelligence.
Conclusion:
Target 205.185.121.17 is a colocation hosting IP with low risk indicators. While the RDP service exposure and DNSBL listing warrant awareness, no evidence of active malicious use was found. No immediate firewall or blocking actions recommended.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | FranTech Solutions |
| ASN | AS53667 |
| Network Name | PONYNET-03 |
| CIDR Block | 205.185.112.0/20 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | mail.ftpvpn.info |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | mail.ftpvpn.info |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 3389 | rdp | tcp | — |
| Closed Ports | 22, 25, 80, 443, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS53667 |
| Network Prefix | 205.185.112.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 46% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 26% | 1 | 4 |
| geolocation | 27% | 2 | 3 |
| Overall | 26% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-17 23:22:06 UTC |
| Last Seen | 2026-10-15 07:40:35 UTC |
| Profile Built | 2026-10-15 07:44:09 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 27 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 205.185.121.17
Who owns the IP address 205.185.121.17?
205.185.121.17 is registered to FranTech Solutions. The address falls within the 205.185.112.0/20 network block. Registration is held at ARIN.
Where is 205.185.121.17 located?
Geolocation data places 205.185.121.17 in Las Vegas, Nevada, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 205.185.121.17 malicious or safe?
205.185.121.17 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 205.185.121.17?
The reverse DNS (PTR) record for 205.185.121.17 is mail.ftpvpn.info. This hostname is not forward-confirmed, so it should be treated as a weak signal.
What ports are open on 205.185.121.17?
Responsive ports observed on 205.185.121.17 include 3389. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.
Is 205.185.121.17 a VPN, proxy, or data center address?
205.185.121.17 is classified as hosting infrastructure based on network ownership and behavioural analysis.