IPDebrief

191.96.165.251

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON 🔧 Full Actions API

🌍 Geolocation

Country🇺🇸 United States
RegionNew York
CityBuffalo
Timezone—
Latitude42.89
Longitude-78.88

🏢 Ownership & Registration

Organizationnetutils-mnt
ASNAS14670
Network NameIPXO
CIDR Block191.96.165.0/24
RIRLACNIC
CountryUS
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRserver.c2dinc.com
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnamesserver.c2dinc.com

🔐 DNS Hygiene

Hygiene Score60% (Good)
SPF2/4 domains
DMARC2/4 domains
FCrDNSNot verified
DNSSECValid
CAANot configured
Domains Checked4 domains

☁️ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierUnknown — Insufficient routing data to classify
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
80httptcp—
443httpstcp—
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
ServerWeb server detected
HTTP Title—

🔐 TLS Certificate

An expired certificate for CN=da1forbakermayor.com was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.
🔒
CN=da1forbakermayor.com
Issued by CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, S=TX, C=US
Self-signed: No
SANsda1forbakermayor.comautodiscover.da1forbakermayor.comcpanel.da1forbakermayor.comcpcalendars.da1forbakermayor.comcpcontacts.da1forbakermayor.commail.da1forbakermayor.comwebdisk.da1forbakermayor.comwebmail.da1forbakermayor.comwww.da1forbakermayor.com
Valid From2021-04-10T00:00:00+00:00
Valid Until2021-07-09T23:59:59+00:00 (expired)
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period90 days

🛡️ Public Network Snapshot

Origin ASNAS14670
Network Prefix191.96.165.0/24
Route mappingFound
HSTSNot detected
CSPNot detected
HTTP/2Not detected

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
11
routing
25%
11
services
25%
11
ownership
25%
12
reputation
0%
00
geolocation
25%
11
Overall20%56
Coverage: 5/6 dimensions · Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-07-07 12:35:13 UTC
Last Seen2026-09-08 15:03:54 UTC
Profile Built2026-09-05 12:17:20 UTC
Data FreshnessLive
Signal Types21
Total Observations29
🔍 21 signal types · 29 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 191.96.165.251

Who owns the IP address 191.96.165.251?

191.96.165.251 is registered to netutils-mnt. The address falls within the 191.96.165.0/24 network block. Registration is held at LACNIC.

Where is 191.96.165.251 located?

Geolocation data places 191.96.165.251 in Buffalo, New York, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 191.96.165.251 malicious or safe?

191.96.165.251 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 191.96.165.251?

The reverse DNS (PTR) record for 191.96.165.251 is server.c2dinc.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.

What ports are open on 191.96.165.251?

Responsive ports observed on 191.96.165.251 include 80, 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.

🏘️ Related IP Addresses

Nearby addresses in 191.96.165.0/24

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.