IPDebrief

158.51.99.19

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP 158.51.99.19 was identified as an asset owned by TNAHOSTING (ASN 32181) within the 158.51.98.0/23 block. Ownership records listed the location as Schaumburg, Illinois, United States. Operational analysis showed the host functioned as a colocation server running a Caddy web service on TCP port 80.

Threat intelligence assigned a Low Risk score of 25 with a minimal operator score. Despite the low-risk classification, the address was flagged as a Suspicious Host with one DNSBL listing present. DNS hygiene was rated Fair due to the absence of DMARC records, while SPF validation was confirmed.

Temporal data showed observations spanning from 2026-08-31 to 2026-09-24. Geolocation validation contradicted RTT physics measurements, indicating a potential data discrepancy. The immediate subnet was classified as clean, and no active campaigns or known attacker classifications were confirmed. The recommendation was to Monitor the asset with Low severity due to signal contradictions.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionIllinois
CitySchaumburg
Timezoneβ€”
Latitude42.01
Longitude-88.10

🏒 Ownership & Registration

OrganizationTNAHOSTING
ASNAS32181
Network NameTNA-1
CIDR Block158.51.98.0/23
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRchi2.us.ntp.li
Forward ConfirmedYes β€” FCrDNS verified
Forward Hostnameschi2.us.ntp.li

πŸ” DNS Hygiene

Hygiene Score40% (Fair)
SPF2/2 domains
DMARC0/2 domains
FCrDNSVerified
DNSSECNot signed
CAANot configured
Domains Checked2 domains

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeSingle-Service Host
Network TierHosting β€” Infrastructure provider without advanced routing
Hosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
Closed Ports22, 25, 443, 3389, 8080, 8443 (1 open / 7 scanned)
ServerCaddy
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
35%
23
routing
13%
11
services
42%
23
ownership
27%
23
reputation
13%
11
geolocation
13%
11
Overall24%912
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) β€” 1 contradiction(s)
AttributionModerate (55%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-08-31 20:39:28 UTC
Last Seen2026-09-24 03:59:19 UTC
Profile Built2026-09-24 04:10:40 UTC
Data FreshnessLive
Signal Types25
Total Observations31
πŸ” 25 signal types Β· 31 observations collected
This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.