209.141.44.113📋 Copy

IP Intelligence Briefing: 209.141.44.113

Date: June 10, 2026

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Provider: BuyVM (ASN 53667, FranTech Solutions)
• Geolocation: US (Nevada, Las Vegas), accuracy radius 2500 km.
• Network Role: Single-service host (RDP on port 3389).
• Threat Indicators: No malicious activity detected (no indicators, blacklist entries, or campaigns).
• DNS: PTR hostname `jav-xxx.4you.tw` (forward resolution confirmed).

---

**2. Observation History**

• Latest Activity: June 10, 2026.
• Key Signals:

- Subnet abuse density: 0.5 (mostly clean).

- 8 DNSBL listings (1 high-severity).

- Geolocation confidence: 0.35 (low).

- No persistent malicious behavior.

---

**3. Relationships**

• Network: Linked to `PONYNET-04` (same subnet).
• DNS: Associated with `jav-xxx.4you.tw` (20+ relationships).
• Organizations: FranTech Solutions (BuyVM provider).

---

**4. Neighborhood Analysis**

• Subnet: `209.141.44.113/24` (256 IPs).
• Neighbor Risk:

- 1 high-risk neighbor (`209.141.44.244`, score 50).

- Subnet abuse density: 0 (clean).

---

**5. Actionable Insights**

• Monitor Neighbor: The high-risk neighbor (`209.141.44.244`) warrants further investigation.
• DNS Hostname: `jav-xxx.4you.tw` may require scrutiny for phishing or malicious activity.
• RDP Service: Ensure port 3389 is secured (e.g., restrict access, enable multi-factor authentication).
• Geolocation Discrepancy: Low geolocation confidence suggests potential spoofing or misconfigured infrastructure.

---

Conclusion:

209.141.44.113 is currently low risk, but its subnet contains a high-risk neighbor. Focus on monitoring the neighbor and validating the DNS hostname. Secure RDP access and verify geolocation accuracy for potential spoofing.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.