Check-Host.cc

IP Address IPv4

216.92.235.111

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of 216.92.235.111

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
ASN
AS7859
Pair Networks
Country
US
United States
Reverse DNS
markbernstein.org
PTR
Open Ports
6
Last scan

Autonomous System

ASN
AS Name
Pair Networks
AS Type
RIR
ARIN
Allocated
1997-01-30
Allocation status
Allocated

Geolocation

Country
US · United States
Continent
North America
Source
MaxMind GeoLite2

Reverse DNS

Last seen
2026-06-23 18:50:12

Network

Prefix
RPKI

Open Ports

Port Proto Service Server Last seen
21 tcp ftp 2026-06-23 18:49:20.000
26 tcp 2026-06-23 10:28:21.000
110 tcp pop3 2026-05-26 05:47:10.000
443 tcp https Apache 2026-05-26 11:28:59.000
587 tcp smtp-submission 2026-05-27 00:14:49.000
995 tcp pop3s 2026-05-27 04:51:50.000

TLS Certificates

Port 443 e4cbcb3e5617…
Subject: markbernstein.org
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: markbernstein.org, www.markbernstein.org
Valid 2025-08-10 00:00:00 → 2026-09-10 23:59:59

Tech Stack

Detected via Wappalyzer-style rules on the HTTP response body, headers, scripts and meta tags.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-leak candidates for this IP

When this IP serves a TLS cert for a domain that fronts behind a CDN, that domain surfaces here as an origin-leak candidate with a confidence score.

Hosted Domains

2 domains resolve (A-record) to this IP.

Multi-Vantage Check

Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.

ICMP responsive This IP replied to our global ICMP sweep — last confirmed 2026-08-03.

No accumulated reachability data yet

Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.

Web Pages

Port Page title Status Flags
443 Mark Bernstein 200

Threat Intelligence

No threat-intel matches

This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.

Co-Hosted Domains

Domains this host references in its HTML AND whose DNS A/AAAA record resolves back to this IP — i.e. actually hosted here.

markbernstein.org DNS-confirmed
www.markbernstein.org DNS-confirmed

External References

Domains the body links to whose DNS does NOT resolve to this IP — usually CDN assets, embeds, or third-party services. Boilerplate (Google Fonts, jsDelivr, w3.org…) is already filtered.

www.eastgate.com href · ×31
amzn.to href · ×22
dl.acm.org href · ×8
tekka.net href · ×7
alistapart.com href · ×2
eastgate.com href · ×2
forum.eastgate.com href · ×2
www.alarmsystem.no href · ×1
www.lalettrevolee.net href · ×1
stoodio.org href · ×1
www.interval.cz href · ×1
www.stoodio.org href · ×1
chess.com href · ×1
www.alistapart.com href · ×1
www.newyorker.com href · ×1
imgs.xkcd.com href · ×1
www.inaturalist.org href · ×1
m.theatlantic.com href · ×1
www.ht03.org href · ×1
use.typekit.com href · ×1
www.assoc-amazon.com href · ×1
ijdst.europia.org href · ×1
emshort.wordpress.com href · ×1
theinformed.life href · ×1
cloud.typography.com href · ×1
webhostingrating.com href · ×1
www.frontiersin.org href · ×1
journals.tdl.org href · ×1
www.thetimes.com href · ×1
www.myopenid.com href · ×1
www.anthropic.com href · ×1

History

First observed
2026-05-26 05:47
Last observed
2026-06-23 18:49
Scan observations
12

The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.