205.185.126.29📋 Copy

# IP Intelligence Briefing: 205.185.126.29

Date: 2026-08-12

Classification: Low Risk

Risk Score: 15/100

## Executive Summary

IP 205.185.126.29 is a low-risk hosting address associated with Frantech Solutions (BuyVM) in Las Vegas, Nevada. The IP belongs to the PONYNET-03 CIDR block (205.185.112.0/20) and demonstrates minimal threat indicators. No active malicious campaigns or known attacker signatures were observed.

## Technical Profile

Ownership & Network:

• ASN: 53667
• Organization: Frantech Solutions
• Network: PONYNET-03 (205.185.112.0/20)
• Infrastructure Type: Colocation Hosting
• Service Classification: Single-Service Host

Geolocation:

• Country: United States
• Region: Nevada
• City: Las Vegas
• Coordinates: 36.102°N, -115.1447°W

DNS Resolution:

• PTR Hostname: smtp2.jzdssba.shop
• Forward Resolution: smtp2.jzdssba.shop
• SPF/DMARC: Not configured

Open Services:

• Port 22 (SSH): Open, running OpenSSH_8.2p1 Ubuntu-4ubuntu0.13

Threat Indicators:

• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• DNSBL Listed: 1 of 8 total lists

## Behavioral History

Observation history (20 records) indicates stable characteristics:

• Geolocation consistently reports Las Vegas, Nevada
• Subnet abuse density classified as "clean" (0.0)
• No observed changes in ownership or threat persistence
• Traceroute confirms 21-hop path to target

## Network Neighborhood Analysis

Subnet 205.185.126.0/24 contains 2 total siblings with 1 active:

• Neighbor 205.185.126.219: Risk Score 25, Authority Score 50
• Overall abuse density: 0
• No threat siblings identified

## Relationship Graph

• Network associations: PONYNET-03 (multiple entries)
• DNS associations: smtp2.jzdssba.shop (multiple entries)

## Recommended Actions

Based on the low-risk profile (score 15), no immediate blocking actions are recommended. Standard monitoring practices apply. The IP does not match any known threat feeds or campaign indicators.

## Conclusion

This IP represents a standard hosting infrastructure address with no evidence of malicious activity. The single DNSBL listing warrants routine monitoring but does not indicate active compromise. No firewall rules recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.